Skip to content
  • Jacques Le Roux's avatar
    Improved: Prevent possible DOS attack done using Java deserialisation (OFBIZ-12592) · 389f90cb
    Jacques Le Roux authored
    The previous commit was twice wrong:
    1. System properties in gradle.properties are not defined using -D but using
    systemProp.
    2. Anyway systemProp. is defining system properties only available in JVM where
    Gradle is running, not the application you run. For that you need to use
    applicationDefaultJvmArgs in application in the main build.gradle.
    
    Here is the system property for jdk.serialFilter
    389f90cb