diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x index 683346e6c1..4aca623934 100644 --- a/release-notes/VERSION-2.x +++ b/release-notes/VERSION-2.x @@ -14,6 +14,7 @@ Project: jackson-databind (reported by threedr3am) #2648: Block one more gadget type (shiro-core) #2653: Block one more gadget type (shiro-core) +#2658: Block one more gadget type (ignite-jta) 2.9.10.3 (23-Feb-2020) diff --git a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java index 08f06ed416..c935f3ce4b 100644 --- a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java +++ b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java @@ -142,6 +142,11 @@ public class SubTypeValidator s.add("org.apache.shiro.realm.jndi.JndiRealmFactory"); s.add("org.apache.shiro.jndi.JndiObjectFactory"); + // [databind#2658]: ignite-jta (, quartz-core) + s.add("org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup"); + s.add("org.apache.ignite.cache.jta.jndi.CacheJndiTmFactory"); + s.add("org.quartz.utils.JNDIConnectionProvider"); + DEFAULT_NO_DESER_CLASS_NAMES = Collections.unmodifiableSet(s); }