com.hazelcast.nio

## Class SerializationClassNameFilter

- java.lang.Object
- - com.hazelcast.nio.SerializationClassNameFilter

- All Implemented Interfaces:
    ClassNameFilter

      public final class SerializationClassNameFilter
      extends Object
      implements ClassNameFilter

  Implementation of basic protection against untrusted deserialization. It holds blacklist and whitelist with classnames and package names.
  See Also:
    `filter(String)`

- - ### Constructor Summary

    Constructors
    Constructor and Description
    `SerializationClassNameFilter(JavaSerializationFilterConfig config)`

  - ### Method Summary

    All Methods Instance Methods Concrete Methods
    Modifier and Type | Method and Description
    --- | ---
    `void` | `filter(String className)` Throws `SecurityException` if the given class name appears on the blacklist or does not appear a whitelist.

    - ### Methods inherited from class java.lang.Object

      `clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

- - ### Constructor Detail

    - #### SerializationClassNameFilter

          public SerializationClassNameFilter(JavaSerializationFilterConfig config)

  - ### Method Detail

    - #### filter

          public void filter(String className)
                      throws SecurityException

      Throws `SecurityException` if the given class name appears on the blacklist or does not appear a whitelist.
      Specified by:
        `filter` in interface `ClassNameFilter`
      Parameters:
        `className` - class name to check
      Throws:
        `SecurityException` - if the classname is not allowed for deserialization

Copyright © 2019. All rights reserved.