Table of Contents Table of Contents Title and Copyright Information Preface Audience Documentation Accessibility Conventions 1 Java Core Libraries 2 Serialization Filtering Addressing Deserialization Vulnerabilities Java Serialization Filters Filter Factories Allow-Lists and Reject-Lists Creating Pattern-Based Filters Creating Custom Filters Reading a Stream of Serialized Objects Setting a Custom Filter for an Individual Stream Setting a JVM-Wide Custom Filter Setting a Custom Filter Using a Pattern Setting a Custom Filter as a Class Setting a Custom Filter as a Method Setting a Filter Factory Built-in Filters Logging Filter Actions 3 Enhanced Deprecation Deprecation in the JDK How to Deprecate APIs Notifications and Warnings Running jdeprscan 4 XML Catalog API Purpose of XML Catalog API XML Catalog API Interfaces Using the XML Catalog API System Reference Public Reference URI Reference Java XML Processors Support Enable Catalog Support Use Catalog with XML Processors Calling Order for Resolvers Detecting Errors 5 Creating Unmodifiable Lists, Sets, and Maps Use Cases Syntax Unmodifiable List Static Factory Methods Unmodifiable Set Static Factory Methods Unmodifiable Map Static Factory Methods Creating Unmodifiable Copies of Collections Creating Unmodifiable Collections from Streams Randomized Iteration Order About Unmodifiable Collections Space Efficiency Thread Safety 6 Process API Process API Classes and Interfaces ProcessBuilder Class Process Class ProcessHandle Interface ProcessHandle.Info Interface Creating a Process Getting Information About a Process Redirecting Output from a Process Filtering Processes with Streams Handling Processes When They Terminate with the onExit Method Controlling Access to Sensitive Process Information 7 Preferences API Comparing the Preferences API to Other Mechanisms Usage Notes Obtain Preferences Objects for an Enclosing Class Obtain Preferences Objects for a Static Method Atomic Updates Determine Backing Store Status Design FAQ 8 Java Logging Overview Java Logging Examples Appendix A: DTD for XMLFormatter Output