Release Note: Update Default Value of com.sun.jndi.ldap.object.trustSerialData System Property

XMLWordPrintable

    • Type: Sub-task
    • Resolution: Delivered
    • Priority: P4
    • 17.0.16-oracle
    • Affects Version/s: 7u471, 8u461, 11.0.28-oracle, 17.0.16-oracle
    • Component/s: core-libs

        In this release, the JDK implementation of the LDAP provider no longer supports deserialization of Java objects by default:

        * The default value of the `com.sun.jndi.ldap.object.trustSerialData` system property has been updated to `false`.

        The transparent deserialization of Java objects from an LDAP context will now require an explicit opt-in. Applications that rely on reconstruction of Java objects or RMI stubs from the LDAP attributes would need to set the `com.sun.jndi.ldap.object.trustSerialData` system property to `true`.

              Assignee:
              Weibing Xiao
              Reporter:
              Weibing Xiao
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: