AfflictionNetworks/narya
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow L (array) types

Browse Source
This commit is contained in:
fourbites
2026-03-20 15:18:36 +01:00
parent c4ab0d13de
commit 35b8acb52a
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/src/main/java/com/threerings/io/ObjectInputStream.java
+11 -1
View File
@@ -248,9 +248,19 @@ public class ObjectInputStream extends DataInputStream
{ {
// validate the class name against the whitelist before loading // validate the class name against the whitelist before loading
if (_allowedPrefixes != null) { if (_allowedPrefixes != null) {
// strip array encoding to get the component class name
// e.g. "[Lcom.threerings.Foo;" -> "com.threerings.Foo"
String checkName = cname;
while (checkName.startsWith("[")) {
checkName = checkName.substring(1);
}
if (checkName.startsWith("L") && checkName.endsWith(";")) {
checkName = checkName.substring(1, checkName.length() - 1);
}
boolean allowed = false; boolean allowed = false;
for (String prefix : _allowedPrefixes) { for (String prefix : _allowedPrefixes) {
if (cname.startsWith(prefix)) { if (checkName.startsWith(prefix)) {
allowed = true; allowed = true;
break; break;
} }