From 8bf6d2d281404ac911d1bba35e8b2c88a0f18cc1 Mon Sep 17 00:00:00 2001 From: Artem Bilan Date: Thu, 21 Sep 2017 12:48:32 -0400 Subject: [PATCH] Fix IMPORTANT block for deserialization in Docs The IMPORTANT block must be wrapped with `====` **Cherry-pick to 1.7.x, 1.6.x & 1.5.x** --- src/reference/asciidoc/amqp.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/reference/asciidoc/amqp.adoc b/src/reference/asciidoc/amqp.adoc index b270f69d..3fc23620 100644 --- a/src/reference/asciidoc/amqp.adoc +++ b/src/reference/asciidoc/amqp.adoc @@ -56,8 +56,8 @@ Those properties can also be extended with user-defined 'headers' by calling the key, Object value)` method. [IMPORTANT] ----- -Starting with versions `1.5.7, 1.6.11, 1.7.4, 2.0.0`, if a message body is a serialized `Serializable` java object, it is no longer deserialized (by default) when performing `toString()` operations (such as in log messages). +==== +Starting with versions `1.5.7`, `1.6.11`, `1.7.4`, `2.0.0`, if a message body is a serialized `Serializable` java object, it is no longer deserialized (by default) when performing `toString()` operations (such as in log messages). This is to prevent unsafe deserialization. By default, only `java.util` and `java.lang` classes are deserialized. To revert to the previous behavior, you can add allowable class/package patterns by invoking `Message.addWhiteListPatterns(...)`.