Skip to content

Add pattern-based whitelisting feature #1207

@Subrhamanya

Description

@Subrhamanya

Is your feature request related to a problem? Please describe.
As of today, we have to register each and every class if we want to allow it for serialization/deserialization if kryo.setRegistrationRequired(true) is set. But this is a bit costlier in terms of code e.g.: lets' say we have 100's of classes we want to register in a package, then we have to register each and every class.

Something like this we want to achieve https://github.com/x-stream/xstream/blob/20f26bcecc2256e032b1073cef52f14a8ef44d56/xstream/src/java/com/thoughtworks/xstream/XStream.java#L2323

Describe the solution you'd like
We have to extend DefaultClassResolver and override getRegistartion method. But this method doesn't work if kryo.setRegistrationRequired(true) is set and only we have to be kryo.setRegistrationRequired(false)
and filter each and every class.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions