[Bug 58662] blacklist some classes in custom ObjectInputStreams

2015-11-27 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=58662 Mark Thomas changed: What|Removed |Added Resolution|--- |INVALID Status|REOPENED

[Bug 58662] blacklist some classes in custom ObjectInputStreams

2015-11-27 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=58662 romain.manni-bucau changed: What|Removed |Added Resolution|INVALID |--- Status|RESOLVED

[Bug 58662] blacklist some classes in custom ObjectInputStreams

2015-11-27 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=58662 --- Comment #2 from romain.manni-bucau --- You dont need to be able to add a jar to lib directory. The point was a user can do it in its installation and this can have side effects. Or do you mean that adding a jar to tomcat/lib makes tomcat no

[Bug 58662] blacklist some classes in custom ObjectInputStreams

2015-11-27 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=58662 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---