]
Ryan Emerson updated ISPN-10868:
--------------------------------
Sprint: DataGrid Sprint #36 (was: DataGrid Sprint #36, DataGrid Sprint #37)
Default whitelist should allow primitives, arrays and reference
arrays
----------------------------------------------------------------------
Key: ISPN-10868
URL:
https://issues.jboss.org/browse/ISPN-10868
Project: Infinispan
Issue Type: Task
Components: Core
Affects Versions: 9.4.16.Final, 10.0.0.Final
Reporter: dan.berindei
Assignee: Ryan Emerson
Priority: Major
Fix For: 10.1.0.Final
Java serialization whitelist should include primitive wrapper classes and arrays types,
if only because it's tedious to specify all of them in the configuration.
There's a similar argument for adding {{java.util.ArrayList}} to the default
whitelist, especially to use as keys, because {{Object[]}} keys do not work with
{{OBJECT}} storage ({{equals()}} and {{hashCode()}} are wrong). I'm not convinced yet,
because applications eventually want to use a custom key class, and POCs can get away with
converting to {{String}} and concatenating.