From 8b2da7dcd6449dea8df41dad5b68d67443737987 Mon Sep 17 00:00:00 2001 From: anafke Date: Wed, 23 Oct 2019 12:25:23 -0400 Subject: [PATCH] Add java.util.concurrent.ConcurrentLinkedDeque to the class deserialization whitelist (JEP-200) (#4300) * Add java.util.concurrent.ConcurrentLinkedDeque Recently upgraded and one of our in-house plugins failed due to: Caused by: java.lang.UnsupportedOperationException: Refusing to marshal java.util.concurrent.ConcurrentLinkedDeque Since both java.util.ArrayDeque and java.util.concurrent.ConcurrentLinkedQueue are whitelisted, it makes sense to also whitelist this class. * Update whitelisted-classes.txt --- core/src/main/resources/jenkins/security/whitelisted-classes.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/core/src/main/resources/jenkins/security/whitelisted-classes.txt b/core/src/main/resources/jenkins/security/whitelisted-classes.txt index 3ddb8d841a..8007fc52ea 100644 --- a/core/src/main/resources/jenkins/security/whitelisted-classes.txt +++ b/core/src/main/resources/jenkins/security/whitelisted-classes.txt @@ -124,6 +124,7 @@ java.util.TreeSet java.util.UUID java.util.Vector java.util.concurrent.ConcurrentHashMap +java.util.concurrent.ConcurrentLinkedDeque java.util.concurrent.ConcurrentLinkedQueue java.util.concurrent.ConcurrentSkipListMap java.util.concurrent.CopyOnWriteArrayList -- GitLab