Interface ClassResolver


  • @Deprecated
    public interface ClassResolver
    Deprecated.
    This class has been deprecated with no replacement, because serialization can be a security liability
    please use ClassResolvers as instance factory

    Security: serialization can be a security liability, and should not be used without defining a list of classes that are allowed to be desirialized. Such a list can be specified with the jdk.serialFilter system property, for instance. See the serialization filtering article for more information.

    • Method Detail

      • resolve

        java.lang.Class<?> resolve​(java.lang.String className)
                            throws java.lang.ClassNotFoundException
        Deprecated.
        Throws:
        java.lang.ClassNotFoundException