Skip to content

Commit 41124aa

Browse files
committed
Java I/O: Context-Specific Deserialization Filters
1 parent a7c6c90 commit 41124aa

File tree

14 files changed

+28
-0
lines changed

14 files changed

+28
-0
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Serializing objects to byte arrays:
2+
Write a Java application that exposes two helper methods for serializing/deserializing objects to/from byte[].
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Serializing objects to strings:
2+
Write a Java application that exposes two helper methods for serializing/deserializing objects to/from String.

Chapter06/P133_ObjectToXML/README.md

+2
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Serializing objects to XML:
2+
Exemplify at least two approaches for serializing/deserializing objects to/from XML format.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Implementing a custom pattern-based ObjectInputFilter:
2+
Provide an example of implementing and setting a custom pattern-based filter via the ObjectInputFilter API.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Implementing a custom pattern-based ObjectInputFilter:
2+
Provide an example of implementing and setting a custom pattern-based filter via the ObjectInputFilter API.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Implementing a custom class ObjectInputFilter:
2+
Exemplify the creation of an ObjectInputFilter via a class implementation.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Implementing a custom method ObjectInputFilter:
2+
Exemplify the creation of an ObjectInputFilter via a method implementation.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Implementing a custom method ObjectInputFilter:
2+
Exemplify the creation of an ObjectInputFilter via a method implementation.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Implementing a custom lambda ObjectInputFilter:
2+
Exemplify the creation of an ObjectInputFilter via a lambda expression.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Avoiding StackOverflowError at deserialization:
2+
First, write a snippet of code that can be successfully serialized but, at the deserialization phase, causes a StackOverflowError. Second, write a filter that avoids this unpleasant scenario.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Avoiding DoS attacks at deserialization:
2+
First, write a snippet of code that can be successfully serialized but, at the deserialization phase, causes a DoS attack. Second, write a filter that avoids this unpleasant scenario.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Introducing JDK 17 easy filter creation:
2+
Explain and exemplify the usage of the JDK 17 allowFilter() and rejectFilter() methods.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Tackling context-specific deserialization filters:
2+
Explain and exemplify the usage of JDK 17 Filter Factories.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Monitoring Deserialization via JFR:
2+
Exemplify the usage of Java Flight Recorder (JFR) for monitoring a deserialization event.

0 commit comments

Comments
 (0)