commit 0578e10044144695ce08c2303660106297bbd284
author Christofer Dutz <christofer.dutz@codecentric.de> Thu Mar 02 09:26:10 2017 +0100
committer Christofer Dutz <christofer.dutz@codecentric.de> Thu Mar 02 09:26:10 2017 +0100
tree ddfa150bc29d5637390fd634f3305ca0bcd15199
parent 3e49fb3522da3b003a87ef2f114c879d5ad6a366

- Removed "Externalizable" from the whitelist

core/src/main/java/flex/messaging/io/amf/Amf3Input.java

diff --git a/core/src/main/java/flex/messaging/io/amf/Amf3Input.java b/core/src/main/java/flex/messaging/io/amf/Amf3Input.java
index 33109f6..9bcc805 100644
--- a/core/src/main/java/flex/messaging/io/amf/Amf3Input.java
+++ b/core/src/main/java/flex/messaging/io/amf/Amf3Input.java
@@ -822,8 +822,6 @@
     {
         if (object instanceof Externalizable)
         {
-            ClassUtil.validateCreation(Externalizable.class);
-
             if (isDebug)
                 trace.startExternalizableObject(className, objectTable.size() - 1);
 

core/src/main/java/flex/messaging/validators/ClassDeserializationValidator.java

diff --git a/core/src/main/java/flex/messaging/validators/ClassDeserializationValidator.java b/core/src/main/java/flex/messaging/validators/ClassDeserializationValidator.java
index 592c629..d9d57e4 100644
--- a/core/src/main/java/flex/messaging/validators/ClassDeserializationValidator.java
+++ b/core/src/main/java/flex/messaging/validators/ClassDeserializationValidator.java
@@ -54,7 +54,6 @@
             "flex.messaging.messages.HTTPMessage",
             "flex.messaging.messages.RemotingMessage",
             "flex.messaging.messages.SOAPMessage",
-            "java.io.Externalizable",
             "java.lang.Boolean",
             "java.lang.Byte",
             "java.lang.Character",