Add object input filter on Connector (#1000)

* Add object input filter on Connector

* Fix ambiguous import

* Change setup jdk to 11

Author: imbyungjun

.github/workflows/run-build-with-test-on-pr.yml

@@ -21,11 +21,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v3
 
-      - name: Setup JDK 8
+      - name: Setup JDK 11
         uses: actions/setup-java@v3
         with:
           distribution: 'zulu'
-          java-version: '8.0.345'
+          java-version: '11.0.22'
           architecture: x64
           cache: 'gradle'
 

build.gradle

@@ -28,8 +28,8 @@ subprojects {
   compileJava.options.encoding = "UTF-8"
   compileTestJava.options.encoding = "UTF-8"
 
-  sourceCompatibility = 1.8
-  targetCompatibility = 1.8
+  sourceCompatibility = 11
+  targetCompatibility = 11
 
   ext {
     profile = project.hasProperty("profile") ? profile : "production"

ngrinder-core/src/main/java/net/grinder/communication/Connector.java

@@ -23,6 +23,7 @@
 
 import java.io.IOException;
 import java.io.InputStream;
+import java.io.ObjectInputFilter;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
 import java.io.OutputStream;
@@ -31,6 +32,8 @@
 import java.net.UnknownHostException;
 
 import net.grinder.common.UncheckedInterruptedException;
+import net.grinder.common.processidentity.ProcessIdentity;
+import net.grinder.engine.controller.AbstractAgentControllerIdentityImplementation;
 
 
 /**
@@ -197,6 +200,23 @@ static ConnectDetails read(InputStream in) throws CommunicationException {
 
 		try {
 			final ObjectInputStream objectInputStream = new ObjectInputStream(in);
+			objectInputStream.setObjectInputFilter(filterInfo -> {
+				if (filterInfo.serialClass() == null) {
+					return ObjectInputFilter.Status.UNDECIDED;
+				}
+
+				if (Address.class.isAssignableFrom(filterInfo.serialClass())
+					|| ConnectionType.class.isAssignableFrom(filterInfo.serialClass())
+					|| Enum.class.isAssignableFrom(filterInfo.serialClass())
+					|| filterInfo.serialClass().getCanonicalName().startsWith("net.grinder.engine")
+					|| filterInfo.serialClass().getCanonicalName().startsWith("net.grinder.common")
+				) {
+					return ObjectInputFilter.Status.ALLOWED;
+				}
+
+				return ObjectInputFilter.Status.REJECTED;
+			});
+
 			final ConnectionType type =
 				(ConnectionType) objectInputStream.readObject();
 			final Address address = (Address) objectInputStream.readObject();

ngrinder-runtime/src/main/java/org/ngrinder/dns/LocalManagedDnsImpl.java

@@ -13,7 +13,14 @@
  */
 package org.ngrinder.dns;
 
-import org.xbill.DNS.*;
+import org.xbill.DNS.ARecord;
+import org.xbill.DNS.Cache;
+import org.xbill.DNS.DClass;
+import org.xbill.DNS.Lookup;
+import org.xbill.DNS.PTRRecord;
+import org.xbill.DNS.Record;
+import org.xbill.DNS.TextParseException;
+import org.xbill.DNS.Type;
 
 import java.net.InetAddress;
 import java.net.UnknownHostException;