|
From: Pelle B. <pe...@us...> - 2004-04-15 15:33:49
|
Update of /cvsroot/neuclear/neuclear-id/src/java/org/neuclear/id In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv10251/src/java/org/neuclear/id Modified Files: SignedNamedCore.java SignedNamedObject.java Log Message: Made the SignedNamedCore and SignedNamedObject unserializable for security reasons. Index: SignedNamedObject.java =================================================================== RCS file: /cvsroot/neuclear/neuclear-id/src/java/org/neuclear/id/SignedNamedObject.java,v retrieving revision 1.20 retrieving revision 1.21 diff -C2 -d -r1.20 -r1.21 *** SignedNamedObject.java 1 Apr 2004 23:19:49 -0000 1.20 --- SignedNamedObject.java 15 Apr 2004 15:33:40 -0000 1.21 *************** *** 2,5 **** --- 2,8 ---- * $Id$ * $Log$ + * Revision 1.21 2004/04/15 15:33:40 pelle + * Made the SignedNamedCore and SignedNamedObject unserializable for security reasons. + * * Revision 1.20 2004/04/01 23:19:49 pelle * Split Identity into Signatory and Identity class. *************** *** 252,255 **** --- 255,260 ---- import org.dom4j.QName; + import java.io.IOException; + import java.io.ObjectInputStream; import java.sql.Timestamp; *************** *** 345,347 **** --- 350,357 ---- private final SignedNamedCore core; + // Disable Serialization + private final void writeObject(ObjectInputStream in) throws IOException { + throw new IOException("object can not be serialized"); + } + } Index: SignedNamedCore.java =================================================================== RCS file: /cvsroot/neuclear/neuclear-id/src/java/org/neuclear/id/SignedNamedCore.java,v retrieving revision 1.23 retrieving revision 1.24 diff -C2 -d -r1.23 -r1.24 *** SignedNamedCore.java 1 Apr 2004 23:19:49 -0000 1.23 --- SignedNamedCore.java 15 Apr 2004 15:33:40 -0000 1.24 *************** *** 2,5 **** --- 2,8 ---- * $Id$ * $Log$ + * Revision 1.24 2004/04/15 15:33:40 pelle + * Made the SignedNamedCore and SignedNamedObject unserializable for security reasons. + * * Revision 1.23 2004/04/01 23:19:49 pelle * Split Identity into Signatory and Identity class. *************** *** 297,300 **** --- 300,305 ---- import org.neuclear.xml.xmlsec.*; + import java.io.IOException; + import java.io.ObjectInputStream; import java.security.PublicKey; import java.sql.Timestamp; *************** *** 450,453 **** --- 455,462 ---- } + // Disable Serialization + private final void writeObject(ObjectInputStream in) throws IOException { + throw new IOException("object can not be serialized"); + } private final String name; |