AfflictionNetworks/narya
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Another class filtering fix

Browse Source
This commit is contained in:
fourbites
2026-03-20 15:41:04 +01:00
parent 35b8acb52a
commit 1fd6240d09
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/src/main/java/com/threerings/io/ObjectInputStream.java
+2 -1
View File
@@ -258,7 +258,8 @@ public class ObjectInputStream extends DataInputStream
checkName = checkName.substring(1, checkName.length() - 1); checkName = checkName.substring(1, checkName.length() - 1);
} }
boolean allowed = false; // primitive array descriptors (I, Z, B, S, C, J, F, D) are always safe
boolean allowed = (checkName.length() == 1);
for (String prefix : _allowedPrefixes) { for (String prefix : _allowedPrefixes) {
if (checkName.startsWith(prefix)) { if (checkName.startsWith(prefix)) {
allowed = true; allowed = true;