-
Sub-task
-
Resolution: Delivered
-
P4
-
20
The default JMX agent now sets an ObjectInputFilter on the RMI connection to restrict the types that the server will deserialize. This should not affect normal usage of the MBeans in the JDK. Applications which register their own MBeans in the Platform MBeanServer may need to extend the filter to support any additional types that their MBeans accept as parameters. The default filter already covers any type that OpenMBeans and MXBeans might use.
The filter pattern is set in `JDK/conf/management/management.properties` using the property `com.sun.management.jmxremote.serial.filter.pattern`. If there are additional Java types that need to be passed, the default can be overridden by running with `-Dcom.sun.management.jmxremote.serial.filter.pattern=`.
Serialization Filtering and the filter pattern format are described in detail in the Core Libraries guide.
The filter pattern is set in `JDK/conf/management/management.properties` using the property `com.sun.management.jmxremote.serial.filter.pattern`. If there are additional Java types that need to be passed, the default can be overridden by running with `-Dcom.sun.management.jmxremote.serial.filter.pattern=`.
Serialization Filtering and the filter pattern format are described in detail in the Core Libraries guide.