Spring/spring-integration
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Replace whitelist with allowlist

Browse Source
This commit is contained in:
Artem Bilan
2020-06-11 18:04:28 -04:00
committed by Gary Russell
parent 7ec1f5cc4b
commit 2419c03b25
18 changed files with 377 additions and 189 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/reference/asciidoc/transformer.adoc
View File

@@ -131,11 +131,11 @@ The following example shows to use Spring's serializer and deserializer:
<int:payload-serializing-transformer input-channel="objectsIn" output-channel="bytesOut"/>
<int:payload-deserializing-transformer input-channel="bytesIn" output-channel="objectsOut"
white-list="com.mycom.*,com.yourcom.*"/>
allow-list="com.mycom.*,com.yourcom.*"/>
----
====
IMPORTANT: When deserializing data from untrusted sources, you should consider adding a `white-list` of package and class patterns.
IMPORTANT: When deserializing data from untrusted sources, you should consider adding a `allow-list` of package and class patterns.
By default, all classes are deserialized.
===== `Object`-to-`Map` and `Map`-to-`Object` Transformers