Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8290367 Update default value and extend the scope of com.sun.jndi.ldap.object.trustSerialData system property
  3. JDK-8351066

Release Note: Update Default Value of com.sun.jndi.ldap.object.trustSerialData System Property

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Delivered
    • Icon: P4 P4
    • 17.0.16-oracle
    • 7u471, 8u461, 11.0.28-oracle, 17.0.16-oracle
    • core-libs

        In this release, the JDK implementation of the LDAP provider no longer supports deserialization of Java objects by default:

        * The default value of the `com.sun.jndi.ldap.object.trustSerialData` system property has been updated to `false`.

        The transparent deserialization of Java objects from an LDAP context will now require an explicit opt-in. Applications that rely on reconstruction of Java objects or RMI stubs from the LDAP attributes would need to set the `com.sun.jndi.ldap.object.trustSerialData` system property to `true`.

              wxiao Weibing Xiao
              wxiao Weibing Xiao
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: