[MYFACES-4021] blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Won't Fix
• Assignee: Leonardo Uribe
• Reporter: Romain Manni-Bucau
• Created: 27/Nov/15 12:03
• Updated: 15/Feb/16 23:41
• Resolved: 15/Feb/16 23:41

Description

https://github.com/apache/incubator-batchee/commit/cfd133c309c21a82fb24cfcc9a7c2365aee4678a#diff-acd0bc06477ce776b0ad8fdda76f8b7eR56 mecanism can be used

(due to recent vulnerability discovered in [collections], spring, groovy we can't suppose we don't run with these libraries so we need this fix as well)