[GEODE-10134] SanctionedSerializablesFilterPattern does not accept proxy classes on JDK 17

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.15.0
• Fix Version/s: 1.15.0
• Component/s: serialization
• Labels: Java17 pull-request-available
• Assignee: Dale Emery
• Reporter: Dale Emery
• Created: 17/Mar/22 20:16
• Updated: 22/Jun/22 20:46
• Resolved: 28/Mar/22 15:58

Description

On JDK 17, the classes of proxies are created in dynamically created packages. The current implemention of SanctionedSerializablesFilterPattern does not recognize those packages, and so rejects all proxy objects.

So far I've seen two dynamically created proxy packages:

• jdk.proxy2
• jdk.proxy3

Adding "jdk.proxy*" to the SanctionedSerializablesFilterPattern fixes the problem, at the risk of accepting an overly broad set of classes.

Issue Links

• links to: GitHub Pull Request #7480