OUTPUT_TL = ThreadLocal.withInitial(() -> {\r\n+ Hessian2Output h2o = new Hessian2Output(null);\r\n+ h2o.setSerializerFactory(Hessian2FactoryInitializer.getInstance().getSerializerFactory());\r\n+ h2o.setCloseStreamOnClose(true);\r\n+ return h2o;\r\n+ });\r\n+\r\n+ private final Hessian2Output mH2o;\r\n+\r\n+ public Hessian2ObjectOutput(OutputStream os) {\r\n+ mH2o = OUTPUT_TL.get();\r\n+ mH2o.init(os);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeBool(boolean v) throws IOException {\r\n+ mH2o.writeBoolean(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeByte(byte v) throws IOException {\r\n+ mH2o.writeInt(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeShort(short v) throws IOException {\r\n+ mH2o.writeInt(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeInt(int v) throws IOException {\r\n+ mH2o.writeInt(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeLong(long v) throws IOException {\r\n+ mH2o.writeLong(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeFloat(float v) throws IOException {\r\n+ mH2o.writeDouble(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeDouble(double v) throws IOException {\r\n+ mH2o.writeDouble(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeBytes(byte[] b) throws IOException {\r\n+ mH2o.writeBytes(b);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeBytes(byte[] b, int off, int len) throws IOException {\r\n+ mH2o.writeBytes(b, off, len);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeUTF(String v) throws IOException {\r\n+ mH2o.writeString(v);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void writeObject(Object obj) throws IOException {\r\n+ mH2o.writeObject(obj);\r\n+ }\r\n+\r\n+ @Override\r\n+ public void flushBuffer() throws IOException {\r\n+ mH2o.flushBuffer();\r\n+ }\r\n+\r\n+ public OutputStream getOutputStream() throws IOException {\r\n+ return mH2o.getBytesOutputStream();\r\n+ }\r\n+\r\n+ @Override\r\n+ public void cleanup() {\r\n+ if(mH2o != null) {\r\n+ mH2o.reset();\r\n+ }\r\n+ }\r\n+}\r\n"}, {"source1": "org/apache/dubbo/common/serialize/hessian2/Hessian2Serialization.java", "source2": "org/apache/dubbo/common/serialize/hessian2/Hessian2Serialization.java", "comments": ["Line-ending differences only"], "unified_diff": "@@ -1,59 +1,59 @@\n-/*\n- * Licensed to the Apache Software Foundation (ASF) under one or more\n- * contributor license agreements. See the NOTICE file distributed with\n- * this work for additional information regarding copyright ownership.\n- * The ASF licenses this file to You under the Apache License, Version 2.0\n- * (the \"License\"); you may not use this file except in compliance with\n- * the License. You may obtain a copy of the License at\n- *\n- * http://www.apache.org/licenses/LICENSE-2.0\n- *\n- * Unless required by applicable law or agreed to in writing, software\n- * distributed under the License is distributed on an \"AS IS\" BASIS,\n- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n- * See the License for the specific language governing permissions and\n- * limitations under the License.\n- */\n-package org.apache.dubbo.common.serialize.hessian2;\n-\n-import org.apache.dubbo.common.URL;\n-import org.apache.dubbo.common.serialize.ObjectInput;\n-import org.apache.dubbo.common.serialize.ObjectOutput;\n-import org.apache.dubbo.common.serialize.Serialization;\n-\n-import java.io.IOException;\n-import java.io.InputStream;\n-import java.io.OutputStream;\n-\n-import static org.apache.dubbo.common.serialize.Constants.HESSIAN2_SERIALIZATION_ID;\n-\n-/**\n- * Hessian2 serialization implementation, hessian2 is the default serialization protocol for dubbo\n- *\n- * \n- * e.g. <dubbo:protocol serialization=\"hessian2\" />\n- *
\n- */\n-public class Hessian2Serialization implements Serialization {\n-\n- @Override\n- public byte getContentTypeId() {\n- return HESSIAN2_SERIALIZATION_ID;\n- }\n-\n- @Override\n- public String getContentType() {\n- return \"x-application/hessian2\";\n- }\n-\n- @Override\n- public ObjectOutput serialize(URL url, OutputStream out) throws IOException {\n- return new Hessian2ObjectOutput(out);\n- }\n-\n- @Override\n- public ObjectInput deserialize(URL url, InputStream is) throws IOException {\n- return new Hessian2ObjectInput(is);\n- }\n-\n-}\n+/*\r\n+ * Licensed to the Apache Software Foundation (ASF) under one or more\r\n+ * contributor license agreements. See the NOTICE file distributed with\r\n+ * this work for additional information regarding copyright ownership.\r\n+ * The ASF licenses this file to You under the Apache License, Version 2.0\r\n+ * (the \"License\"); you may not use this file except in compliance with\r\n+ * the License. You may obtain a copy of the License at\r\n+ *\r\n+ * http://www.apache.org/licenses/LICENSE-2.0\r\n+ *\r\n+ * Unless required by applicable law or agreed to in writing, software\r\n+ * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n+ * See the License for the specific language governing permissions and\r\n+ * limitations under the License.\r\n+ */\r\n+package org.apache.dubbo.common.serialize.hessian2;\r\n+\r\n+import org.apache.dubbo.common.URL;\r\n+import org.apache.dubbo.common.serialize.ObjectInput;\r\n+import org.apache.dubbo.common.serialize.ObjectOutput;\r\n+import org.apache.dubbo.common.serialize.Serialization;\r\n+\r\n+import java.io.IOException;\r\n+import java.io.InputStream;\r\n+import java.io.OutputStream;\r\n+\r\n+import static org.apache.dubbo.common.serialize.Constants.HESSIAN2_SERIALIZATION_ID;\r\n+\r\n+/**\r\n+ * Hessian2 serialization implementation, hessian2 is the default serialization protocol for dubbo\r\n+ *\r\n+ * \r\n+ * e.g. <dubbo:protocol serialization=\"hessian2\" />\r\n+ *
\r\n+ */\r\n+public class Hessian2Serialization implements Serialization {\r\n+\r\n+ @Override\r\n+ public byte getContentTypeId() {\r\n+ return HESSIAN2_SERIALIZATION_ID;\r\n+ }\r\n+\r\n+ @Override\r\n+ public String getContentType() {\r\n+ return \"x-application/hessian2\";\r\n+ }\r\n+\r\n+ @Override\r\n+ public ObjectOutput serialize(URL url, OutputStream out) throws IOException {\r\n+ return new Hessian2ObjectOutput(out);\r\n+ }\r\n+\r\n+ @Override\r\n+ public ObjectInput deserialize(URL url, InputStream is) throws IOException {\r\n+ return new Hessian2ObjectInput(is);\r\n+ }\r\n+\r\n+}\r\n"}, {"source1": "org/apache/dubbo/common/serialize/hessian2/Hessian2SerializerFactory.java", "source2": "org/apache/dubbo/common/serialize/hessian2/Hessian2SerializerFactory.java", "comments": ["Line-ending differences only"], "unified_diff": "@@ -1,31 +1,31 @@\n-/*\n- * Licensed to the Apache Software Foundation (ASF) under one or more\n- * contributor license agreements. See the NOTICE file distributed with\n- * this work for additional information regarding copyright ownership.\n- * The ASF licenses this file to You under the Apache License, Version 2.0\n- * (the \"License\"); you may not use this file except in compliance with\n- * the License. You may obtain a copy of the License at\n- *\n- * http://www.apache.org/licenses/LICENSE-2.0\n- *\n- * Unless required by applicable law or agreed to in writing, software\n- * distributed under the License is distributed on an \"AS IS\" BASIS,\n- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n- * See the License for the specific language governing permissions and\n- * limitations under the License.\n- */\n-package org.apache.dubbo.common.serialize.hessian2;\n-\n-import com.alibaba.com.caucho.hessian.io.SerializerFactory;\n-\n-public class Hessian2SerializerFactory extends SerializerFactory {\n-\n- public Hessian2SerializerFactory() {\n- }\n-\n- @Override\n- public ClassLoader getClassLoader() {\n- return Thread.currentThread().getContextClassLoader();\n- }\n-\n+/*\r\n+ * Licensed to the Apache Software Foundation (ASF) under one or more\r\n+ * contributor license agreements. See the NOTICE file distributed with\r\n+ * this work for additional information regarding copyright ownership.\r\n+ * The ASF licenses this file to You under the Apache License, Version 2.0\r\n+ * (the \"License\"); you may not use this file except in compliance with\r\n+ * the License. You may obtain a copy of the License at\r\n+ *\r\n+ * http://www.apache.org/licenses/LICENSE-2.0\r\n+ *\r\n+ * Unless required by applicable law or agreed to in writing, software\r\n+ * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n+ * See the License for the specific language governing permissions and\r\n+ * limitations under the License.\r\n+ */\r\n+package org.apache.dubbo.common.serialize.hessian2;\r\n+\r\n+import com.alibaba.com.caucho.hessian.io.SerializerFactory;\r\n+\r\n+public class Hessian2SerializerFactory extends SerializerFactory {\r\n+\r\n+ public Hessian2SerializerFactory() {\r\n+ }\r\n+\r\n+ @Override\r\n+ public ClassLoader getClassLoader() {\r\n+ return Thread.currentThread().getContextClassLoader();\r\n+ }\r\n+\r\n }\n"}, {"source1": "org/apache/dubbo/common/serialize/hessian2/dubbo/AbstractHessian2FactoryInitializer.java", "source2": "org/apache/dubbo/common/serialize/hessian2/dubbo/AbstractHessian2FactoryInitializer.java", "comments": ["Line-ending differences only"], "unified_diff": "@@ -1,36 +1,36 @@\n-/*\n- * Licensed to the Apache Software Foundation (ASF) under one or more\n- * contributor license agreements. See the NOTICE file distributed with\n- * this work for additional information regarding copyright ownership.\n- * The ASF licenses this file to You under the Apache License, Version 2.0\n- * (the \"License\"); you may not use this file except in compliance with\n- * the License. You may obtain a copy of the License at\n- *\n- * http://www.apache.org/licenses/LICENSE-2.0\n- *\n- * Unless required by applicable law or agreed to in writing, software\n- * distributed under the License is distributed on an \"AS IS\" BASIS,\n- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n- * See the License for the specific language governing permissions and\n- * limitations under the License.\n- */\n-package org.apache.dubbo.common.serialize.hessian2.dubbo;\n-\n-import com.alibaba.com.caucho.hessian.io.SerializerFactory;\n-\n-public abstract class AbstractHessian2FactoryInitializer implements Hessian2FactoryInitializer {\n- private static SerializerFactory SERIALIZER_FACTORY;\n-\n- @Override\n- public SerializerFactory getSerializerFactory() {\n- if (SERIALIZER_FACTORY != null) {\n- return SERIALIZER_FACTORY;\n- }\n- synchronized (this) {\n- SERIALIZER_FACTORY = createSerializerFactory();\n- }\n- return SERIALIZER_FACTORY;\n- }\n-\n- protected abstract SerializerFactory createSerializerFactory();\n-}\n+/*\r\n+ * Licensed to the Apache Software Foundation (ASF) under one or more\r\n+ * contributor license agreements. See the NOTICE file distributed with\r\n+ * this work for additional information regarding copyright ownership.\r\n+ * The ASF licenses this file to You under the Apache License, Version 2.0\r\n+ * (the \"License\"); you may not use this file except in compliance with\r\n+ * the License. You may obtain a copy of the License at\r\n+ *\r\n+ * http://www.apache.org/licenses/LICENSE-2.0\r\n+ *\r\n+ * Unless required by applicable law or agreed to in writing, software\r\n+ * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n+ * See the License for the specific language governing permissions and\r\n+ * limitations under the License.\r\n+ */\r\n+package org.apache.dubbo.common.serialize.hessian2.dubbo;\r\n+\r\n+import com.alibaba.com.caucho.hessian.io.SerializerFactory;\r\n+\r\n+public abstract class AbstractHessian2FactoryInitializer implements Hessian2FactoryInitializer {\r\n+ private static SerializerFactory SERIALIZER_FACTORY;\r\n+\r\n+ @Override\r\n+ public SerializerFactory getSerializerFactory() {\r\n+ if (SERIALIZER_FACTORY != null) {\r\n+ return SERIALIZER_FACTORY;\r\n+ }\r\n+ synchronized (this) {\r\n+ SERIALIZER_FACTORY = createSerializerFactory();\r\n+ }\r\n+ return SERIALIZER_FACTORY;\r\n+ }\r\n+\r\n+ protected abstract SerializerFactory createSerializerFactory();\r\n+}\r\n"}, {"source1": "org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java", "source2": "org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java", "comments": ["Line-ending differences only"], "unified_diff": "@@ -1,28 +1,28 @@\n-/*\n- * Licensed to the Apache Software Foundation (ASF) under one or more\n- * contributor license agreements. See the NOTICE file distributed with\n- * this work for additional information regarding copyright ownership.\n- * The ASF licenses this file to You under the Apache License, Version 2.0\n- * (the \"License\"); you may not use this file except in compliance with\n- * the License. You may obtain a copy of the License at\n- *\n- * http://www.apache.org/licenses/LICENSE-2.0\n- *\n- * Unless required by applicable law or agreed to in writing, software\n- * distributed under the License is distributed on an \"AS IS\" BASIS,\n- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n- * See the License for the specific language governing permissions and\n- * limitations under the License.\n- */\n-package org.apache.dubbo.common.serialize.hessian2.dubbo;\n-\n-import org.apache.dubbo.common.serialize.hessian2.Hessian2SerializerFactory;\n-\n-import com.alibaba.com.caucho.hessian.io.SerializerFactory;\n-\n-public class DefaultHessian2FactoryInitializer extends AbstractHessian2FactoryInitializer {\n- @Override\n- protected SerializerFactory createSerializerFactory() {\n- return new Hessian2SerializerFactory();\n- }\n-}\n+/*\r\n+ * Licensed to the Apache Software Foundation (ASF) under one or more\r\n+ * contributor license agreements. See the NOTICE file distributed with\r\n+ * this work for additional information regarding copyright ownership.\r\n+ * The ASF licenses this file to You under the Apache License, Version 2.0\r\n+ * (the \"License\"); you may not use this file except in compliance with\r\n+ * the License. You may obtain a copy of the License at\r\n+ *\r\n+ * http://www.apache.org/licenses/LICENSE-2.0\r\n+ *\r\n+ * Unless required by applicable law or agreed to in writing, software\r\n+ * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n+ * See the License for the specific language governing permissions and\r\n+ * limitations under the License.\r\n+ */\r\n+package org.apache.dubbo.common.serialize.hessian2.dubbo;\r\n+\r\n+import org.apache.dubbo.common.serialize.hessian2.Hessian2SerializerFactory;\r\n+\r\n+import com.alibaba.com.caucho.hessian.io.SerializerFactory;\r\n+\r\n+public class DefaultHessian2FactoryInitializer extends AbstractHessian2FactoryInitializer {\r\n+ @Override\r\n+ protected SerializerFactory createSerializerFactory() {\r\n+ return new Hessian2SerializerFactory();\r\n+ }\r\n+}\r\n"}, {"source1": "org/apache/dubbo/common/serialize/hessian2/dubbo/Hessian2FactoryInitializer.java", "source2": "org/apache/dubbo/common/serialize/hessian2/dubbo/Hessian2FactoryInitializer.java", "comments": ["Line-ending differences only"], "unified_diff": "@@ -1,43 +1,43 @@\n-/*\n- * Licensed to the Apache Software Foundation (ASF) under one or more\n- * contributor license agreements. See the NOTICE file distributed with\n- * this work for additional information regarding copyright ownership.\n- * The ASF licenses this file to You under the Apache License, Version 2.0\n- * (the \"License\"); you may not use this file except in compliance with\n- * the License. You may obtain a copy of the License at\n- *\n- * http://www.apache.org/licenses/LICENSE-2.0\n- *\n- * Unless required by applicable law or agreed to in writing, software\n- * distributed under the License is distributed on an \"AS IS\" BASIS,\n- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n- * See the License for the specific language governing permissions and\n- * limitations under the License.\n- */\n-package org.apache.dubbo.common.serialize.hessian2.dubbo;\n-\n-import org.apache.dubbo.common.config.ConfigurationUtils;\n-import org.apache.dubbo.common.extension.ExtensionLoader;\n-import org.apache.dubbo.common.extension.SPI;\n-import org.apache.dubbo.common.utils.StringUtils;\n-\n-import com.alibaba.com.caucho.hessian.io.SerializerFactory;\n-\n-@SPI(\"default\")\n-public interface Hessian2FactoryInitializer {\n- String WHITELIST = \"dubbo.application.hessian2.whitelist\";\n- String ALLOW = \"dubbo.application.hessian2.allow\";\n- String DENY = \"dubbo.application.hessian2.deny\";\n- ExtensionLoader loader = ExtensionLoader.getExtensionLoader(Hessian2FactoryInitializer.class);\n-\n- SerializerFactory getSerializerFactory();\n-\n- static Hessian2FactoryInitializer getInstance() {\n- String whitelist = ConfigurationUtils.getProperty(WHITELIST);\n- if (StringUtils.isNotEmpty(whitelist)) {\n- return loader.getExtension(\"whitelist\");\n- }\n- return loader.getDefaultExtension();\n- }\n-\n-}\n+/*\r\n+ * Licensed to the Apache Software Foundation (ASF) under one or more\r\n+ * contributor license agreements. See the NOTICE file distributed with\r\n+ * this work for additional information regarding copyright ownership.\r\n+ * The ASF licenses this file to You under the Apache License, Version 2.0\r\n+ * (the \"License\"); you may not use this file except in compliance with\r\n+ * the License. You may obtain a copy of the License at\r\n+ *\r\n+ * http://www.apache.org/licenses/LICENSE-2.0\r\n+ *\r\n+ * Unless required by applicable law or agreed to in writing, software\r\n+ * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n+ * See the License for the specific language governing permissions and\r\n+ * limitations under the License.\r\n+ */\r\n+package org.apache.dubbo.common.serialize.hessian2.dubbo;\r\n+\r\n+import org.apache.dubbo.common.config.ConfigurationUtils;\r\n+import org.apache.dubbo.common.extension.ExtensionLoader;\r\n+import org.apache.dubbo.common.extension.SPI;\r\n+import org.apache.dubbo.common.utils.StringUtils;\r\n+\r\n+import com.alibaba.com.caucho.hessian.io.SerializerFactory;\r\n+\r\n+@SPI(\"default\")\r\n+public interface Hessian2FactoryInitializer {\r\n+ String WHITELIST = \"dubbo.application.hessian2.whitelist\";\r\n+ String ALLOW = \"dubbo.application.hessian2.allow\";\r\n+ String DENY = \"dubbo.application.hessian2.deny\";\r\n+ ExtensionLoader loader = ExtensionLoader.getExtensionLoader(Hessian2FactoryInitializer.class);\r\n+\r\n+ SerializerFactory getSerializerFactory();\r\n+\r\n+ static Hessian2FactoryInitializer getInstance() {\r\n+ String whitelist = ConfigurationUtils.getProperty(WHITELIST);\r\n+ if (StringUtils.isNotEmpty(whitelist)) {\r\n+ return loader.getExtension(\"whitelist\");\r\n+ }\r\n+ return loader.getDefaultExtension();\r\n+ }\r\n+\r\n+}\r\n"}, {"source1": "org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java", "source2": "org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java", "comments": ["Line-ending differences only"], "unified_diff": "@@ -1,50 +1,50 @@\n-/*\n- * Licensed to the Apache Software Foundation (ASF) under one or more\n- * contributor license agreements. See the NOTICE file distributed with\n- * this work for additional information regarding copyright ownership.\n- * The ASF licenses this file to You under the Apache License, Version 2.0\n- * (the \"License\"); you may not use this file except in compliance with\n- * the License. You may obtain a copy of the License at\n- *\n- * http://www.apache.org/licenses/LICENSE-2.0\n- *\n- * Unless required by applicable law or agreed to in writing, software\n- * distributed under the License is distributed on an \"AS IS\" BASIS,\n- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n- * See the License for the specific language governing permissions and\n- * limitations under the License.\n- */\n-package org.apache.dubbo.common.serialize.hessian2.dubbo;\n-\n-import org.apache.dubbo.common.config.ConfigurationUtils;\n-import org.apache.dubbo.common.serialize.hessian2.Hessian2SerializerFactory;\n-import org.apache.dubbo.common.utils.StringUtils;\n-\n-import com.alibaba.com.caucho.hessian.io.SerializerFactory;\n-\n-/**\n- * see https://github.com/ebourg/hessian/commit/cf851f5131707891e723f7f6a9718c2461aed826\n- */\n-public class WhitelistHessian2FactoryInitializer extends AbstractHessian2FactoryInitializer {\n-\n- @Override\n- public SerializerFactory createSerializerFactory() {\n- SerializerFactory serializerFactory = new Hessian2SerializerFactory();\n- String whiteList = ConfigurationUtils.getProperty(WHITELIST);\n- if (\"true\".equals(whiteList)) {\n- serializerFactory.getClassFactory().setWhitelist(true);\n- String allowPattern = ConfigurationUtils.getProperty(ALLOW);\n- if (StringUtils.isNotEmpty(allowPattern)) {\n- serializerFactory.getClassFactory().allow(allowPattern);\n- }\n- } else {\n- serializerFactory.getClassFactory().setWhitelist(false);\n- String denyPattern = ConfigurationUtils.getProperty(DENY);\n- if (StringUtils.isNotEmpty(denyPattern)) {\n- serializerFactory.getClassFactory().deny(denyPattern);\n- }\n- }\n- return serializerFactory;\n- }\n-\n-}\n+/*\r\n+ * Licensed to the Apache Software Foundation (ASF) under one or more\r\n+ * contributor license agreements. See the NOTICE file distributed with\r\n+ * this work for additional information regarding copyright ownership.\r\n+ * The ASF licenses this file to You under the Apache License, Version 2.0\r\n+ * (the \"License\"); you may not use this file except in compliance with\r\n+ * the License. You may obtain a copy of the License at\r\n+ *\r\n+ * http://www.apache.org/licenses/LICENSE-2.0\r\n+ *\r\n+ * Unless required by applicable law or agreed to in writing, software\r\n+ * distributed under the License is distributed on an \"AS IS\" BASIS,\r\n+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\n+ * See the License for the specific language governing permissions and\r\n+ * limitations under the License.\r\n+ */\r\n+package org.apache.dubbo.common.serialize.hessian2.dubbo;\r\n+\r\n+import org.apache.dubbo.common.config.ConfigurationUtils;\r\n+import org.apache.dubbo.common.serialize.hessian2.Hessian2SerializerFactory;\r\n+import org.apache.dubbo.common.utils.StringUtils;\r\n+\r\n+import com.alibaba.com.caucho.hessian.io.SerializerFactory;\r\n+\r\n+/**\r\n+ * see https://github.com/ebourg/hessian/commit/cf851f5131707891e723f7f6a9718c2461aed826\r\n+ */\r\n+public class WhitelistHessian2FactoryInitializer extends AbstractHessian2FactoryInitializer {\r\n+\r\n+ @Override\r\n+ public SerializerFactory createSerializerFactory() {\r\n+ SerializerFactory serializerFactory = new Hessian2SerializerFactory();\r\n+ String whiteList = ConfigurationUtils.getProperty(WHITELIST);\r\n+ if (\"true\".equals(whiteList)) {\r\n+ serializerFactory.getClassFactory().setWhitelist(true);\r\n+ String allowPattern = ConfigurationUtils.getProperty(ALLOW);\r\n+ if (StringUtils.isNotEmpty(allowPattern)) {\r\n+ serializerFactory.getClassFactory().allow(allowPattern);\r\n+ }\r\n+ } else {\r\n+ serializerFactory.getClassFactory().setWhitelist(false);\r\n+ String denyPattern = ConfigurationUtils.getProperty(DENY);\r\n+ if (StringUtils.isNotEmpty(denyPattern)) {\r\n+ serializerFactory.getClassFactory().deny(denyPattern);\r\n+ }\r\n+ }\r\n+ return serializerFactory;\r\n+ }\r\n+\r\n+}\r\n"}]}