FeatureCompatibilityMBean (Java API Reference for Oracle WebLogic Server)

All Superinterfaces:

ConfigurationMBean, DescriptorBean, javax.management.DynamicMBean, javax.management.MBeanRegistration, javax.management.NotificationBroadcaster, SettableBean, WebLogicMBean
```
public interface FeatureCompatibilityMBean
extends ConfigurationMBean
```
Controls feature compatibility behavior for WebLogic Server features.

The compatibility attributes on this MBean preserve legacy behavior when disabled. Enabling them applies the corresponding tightened security behavior. These protections are enabled by default.

Field Summary

Fields
Modifier and Type	Field	Description
`static boolean`	`DEFAULT_CROSS_DOMAIN_T3_S_CONNECTION_TRUST_VALIDATION_ENABLED`	Default value for CrossDomainT3SConnectionTrustValidationEnabled.
`static boolean`	`DEFAULT_IIOP_STRICT_REMOTE_BUSINESS_INTERFACE_VALIDATION_ENABLED`	Default value for IIOPStrictRemoteBusinessInterfaceValidationEnabled.
`static boolean`	`DEFAULT_IIOP_TYPED_READ_RESOLVE_PROXY_VALIDATION_ENABLED`	Default value for IIOPTypedReadResolveProxyValidationEnabled.
`static boolean`	`DEFAULT_IIOP_UNAUTHENTICATED_SERVICE_CONTEXT_VALUE_TYPE_FILTERING_ENABLED`	Default value for IIOPUnauthenticatedServiceContextValueTypeFilteringEnabled.
`static boolean`	`DEFAULT_JAXWS_REJECT_UNKNOWN_SEI_OPERATIONS_ENABLED`	Default value for JAXWSRejectUnknownSEIOperationsEnabled.
`static boolean`	`DEFAULT_JNDI_ADDITIONAL_FACTORIES_ALLOW_LISTS_ENABLED`	Default value for JNDIAdditionalFactoriesAllowListsEnabled.
`static boolean`	`DEFAULT_JNDI_BINDING_AUTHORIZATION_POLICY_ENABLED`	Default value for JNDIBindingAuthorizationPolicyEnabled.
`static boolean`	`DEFAULT_JNDI_OUTBOUND_CONNECTIONS_ALLOW_LIST_ENABLED`	Default value for JNDIOutboundConnectionsAllowListEnabled.
`static int`	`DEFAULT_SERIALIZED_WORK_CONTEXT_MAXIMUM_SIZE`	Default value for SerializedWorkContextMaximumSize.
`static boolean`	`DEFAULT_SPRING_JTA_DESERIALIZATION_JNDI_LOOKUP_DISABLED`	Default value for SpringJtaDeserializationJndiLookupDisabled.
`static boolean`	`DEFAULT_STRICT_REPLICATION_AUTHORIZATION_ENABLED`	Default value for StrictReplicationAuthorizationEnabled.
`static boolean`	`DEFAULT_T3_LEGACY_CROSS_DOMAIN_CREDENTIAL_JVMID_REPLAY_PROTECTION_ENABLED`	Default value for T3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled.
`static boolean`	`DEFAULT_T3_ROUTE_ONLY_TO_TRUSTED_SERVERS_ENABLED`	Default value for T3RouteOnlyToTrustedServersEnabled.
`static boolean`	`DEFAULT_WL_PROXY_CLIENT_CERTIFICATE_CHAIN_VALIDATION_ENABLED`	Default value for WLProxyClientCertificateChainValidationEnabled.
`static boolean`	`DEFAULT_WLDF_SCRIPT_ACTION_PATH_RESTRICTION_ENABLED`	Default value for WLDFScriptActionPathRestrictionEnabled.
`static boolean`	`DEFAULT_WORK_CONTEXT_CLASS_VALIDATION_ENABLED`	Default value for WorkContextClassValidationEnabled.
`static int`	`DEFAULT_WORK_CONTEXT_INPUT_MAXIMUM_ASCII_FIELD_SIZE`	Default value for WorkContextInputMaximumASCIIFieldSize.
`static boolean`	`DEFAULT_WSAT_IGNORE_UNKNOWN_REPLAY_COMPLETION_ENABLED`	Default value for WSATIgnoreUnknownReplayCompletionEnabled.
`static boolean`	`DEFAULT_WSAT_REGISTRATION_SECRET_ENABLED`	Default value for WSATRegistrationSecretEnabled.

Fields inherited from interface weblogic.management.configuration.ConfigurationMBean
DEFAULT_EMPTY_BYTE_ARRAY

Method Summary

All Methods Instance Methods Abstract Methods
Modifier and Type	Method	Description
`int`	`getSerializedWorkContextMaximumSize()`	Specifies the maximum allowed size, in bytes, of a serialized SerializableWorkContext payload read from a WorkArea input stream.
`int`	`getWorkContextInputMaximumASCIIFieldSize()`	Specifies the maximum allowed size, in bytes, of an ASCII field read from the WorkArea binary encoding in which the field length is represented by a four-byte signed integer.
`boolean`	`isCrossDomainT3SConnectionTrustValidationEnabled()`	Returns whether reused cross-domain T3S connections require trust validation.
`boolean`	`isIIOPStrictRemoteBusinessInterfaceValidationEnabled()`	Controls strict validation of IIOP business interfaces used during client stub generation.
`boolean`	`isIIOPTypedReadResolveProxyValidationEnabled()`	Controls strict validation of typed IIOP serialization wrappers.
`boolean`	`isIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled()`	Returns whether IIOP request and reply service-context valuetypes are filtered by the unauthenticated deserialization allowlist.
`boolean`	`isJAXWSRejectUnknownSEIOperationsEnabled()`	Specifies whether JAX-WS SEI endpoints reject requests whose SOAP operation does not resolve to an SEI method before invoking downstream tubes.
`boolean`	`isJNDIAdditionalFactoriesAllowListsEnabled()`	Returns whether the JNDI additional factory allowlists are enabled.
`boolean`	`isJNDIBindingAuthorizationPolicyEnabled()`	Returns whether policy enforcement is enabled for authorization of JNDI namespace binding changes.
`boolean`	`isJNDIOutboundConnectionsAllowListEnabled()`	Returns whether the JNDI outbound connection allowlist is enabled.
`boolean`	`isSAML2StrictArtifactResolutionEnabled()`	Specifies whether SAML 2.0 artifact-resolution requesters must be authenticated before accessing the artifact cache.
`boolean`	`isSpringJtaDeserializationJndiLookupDisabled()`	Controls whether Spring JtaTransactionManager skips resolving serialized JNDI names while deserializing.
`boolean`	`isT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled()`	Specifies whether T3 RJVM identify processing should enable replay protection for JVMIDs signed by legacy cross-domain credentials.
`boolean`	`isT3RouteOnlyToTrustedServersEnabled()`	Returns whether T3 server routing is limited to trusted servers.
`boolean`	`isWLProxyClientCertificateChainValidationEnabled()`	Returns whether WebLogic Server validates certificate chains supplied in the `WL-Proxy-Client-Cert` header before using them for X.509 identity assertion.
`boolean`	`isWorkContextClassValidationEnabled()`	Returns whether tightened validation is enabled for WorkContext implementation classes read from WorkArea input streams.
`boolean`	`isWSATIgnoreUnknownReplayCompletionEnabled()`	Specifies whether WS-AT replay completion requests with no matching local transaction should be ignored instead of rolling back a recovery resource created from the caller-supplied ReplyTo endpoint.
`boolean`	`isWSATRegistrationSecretEnabled()`	Controls whether WS-AT registration requires proof that the caller received the exported coordination context before participant enlistment.
`void`	`setCrossDomainT3SConnectionTrustValidationEnabled(boolean enabled)`	Sets whether reused cross-domain T3S connections require trust validation.
`void`	`setIIOPStrictRemoteBusinessInterfaceValidationEnabled(boolean enabled)`	Sets the IIOP Strict Remote Business Interface Validation Enabled value.
`void`	`setIIOPTypedReadResolveProxyValidationEnabled(boolean enabled)`	Sets the IIOP Typed Read Resolve Proxy Validation Enabled value.
`void`	`setIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled(boolean enabled)`	Sets the IIOP Unauthenticated Service Context Value Type Filtering Enabled value.
`void`	`setJAXWSRejectUnknownSEIOperationsEnabled(boolean enabled)`	Sets whether unknown JAX-WS SEI operations are rejected before downstream processing.
`void`	`setJNDIAdditionalFactoriesAllowListsEnabled(boolean enabled)`	Sets the value of the JNDI Additional Factories AllowLists Enabled attribute.
`void`	`setJNDIBindingAuthorizationPolicyEnabled(boolean enabled)`	Sets the value of the JNDI Binding Authorization Policy Enabled attribute.
`void`	`setJNDIOutboundConnectionsAllowListEnabled(boolean enabled)`	Sets the value of the JNDI Outbound Connections AllowList Enabled attribute.
`void`	`setSAML2StrictArtifactResolutionEnabled(boolean enabled)`	Sets whether strict SAML 2.0 artifact resolution is enabled.
`void`	`setSerializedWorkContextMaximumSize(int bytes)`	Sets the value of the SerializedWorkContextMaximumSize attribute.
`void`	`setSpringJtaDeserializationJndiLookupDisabled(boolean disabled)`	Sets whether Spring JtaTransactionManager skips resolving serialized JNDI names while deserializing.
`void`	`setT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled(boolean enabled)`	Sets the value of the T3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled attribute.
`void`	`setT3RouteOnlyToTrustedServersEnabled(boolean enabled)`	Sets the value of the T3 Route Only To Trusted Servers Enabled attribute.
`void`	`setWLProxyClientCertificateChainValidationEnabled(boolean enabled)`	Sets the value of the WL Proxy Client Certificate Chain Validation Enabled attribute.
`void`	`setWorkContextClassValidationEnabled(boolean enabled)`	Sets the value of the WorkContext Class Validation Enabled attribute.
`void`	`setWorkContextInputMaximumASCIIFieldSize(int bytes)`	Sets the value of the WorkContextInputMaximumASCIIFieldSize attribute.
`void`	`setWSATIgnoreUnknownReplayCompletionEnabled(boolean enabled)`	Sets the value of the WSATIgnoreUnknownReplayCompletionEnabled attribute.
`void`	`setWSATRegistrationSecretEnabled(boolean enabled)`	Sets the value of the WSATRegistrationSecretEnabled attribute.

Methods inherited from interface weblogic.management.configuration.ConfigurationMBean
freezeCurrentValue, getId, getInheritedProperties, getName, getNotes, isDynamicallyCreated, isInherited, isSet, restoreDefaultValue, setComments, setDefaultedMBean, setName, setNotes, setPersistenceEnabled, unSet

Methods inherited from interface weblogic.descriptor.DescriptorBean
addPropertyChangeListener, createChildCopyIncludingObsolete, getParentBean, isEditable, removePropertyChangeListener

Methods inherited from interface javax.management.DynamicMBean
getAttribute, getAttributes, invoke, setAttribute, setAttributes

Methods inherited from interface javax.management.MBeanRegistration
postDeregister, postRegister, preDeregister, preRegister

Methods inherited from interface javax.management.NotificationBroadcaster
addNotificationListener, getNotificationInfo, removeNotificationListener

Methods inherited from interface weblogic.management.WebLogicMBean
getMBeanInfo, getObjectName, getParent, getType, isCachingDisabled, isRegistered, setParent

- Field Detail
  - DEFAULT_SERIALIZED_WORK_CONTEXT_MAXIMUM_SIZE
```
static final int DEFAULT_SERIALIZED_WORK_CONTEXT_MAXIMUM_SIZE
```
    Default value for SerializedWorkContextMaximumSize.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_WORK_CONTEXT_INPUT_MAXIMUM_ASCII_FIELD_SIZE
```
static final int DEFAULT_WORK_CONTEXT_INPUT_MAXIMUM_ASCII_FIELD_SIZE
```
    Default value for WorkContextInputMaximumASCIIFieldSize.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_STRICT_REPLICATION_AUTHORIZATION_ENABLED
```
static final boolean DEFAULT_STRICT_REPLICATION_AUTHORIZATION_ENABLED
```
    Default value for StrictReplicationAuthorizationEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_WLDF_SCRIPT_ACTION_PATH_RESTRICTION_ENABLED
```
static final boolean DEFAULT_WLDF_SCRIPT_ACTION_PATH_RESTRICTION_ENABLED
```
    Default value for WLDFScriptActionPathRestrictionEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_T3_ROUTE_ONLY_TO_TRUSTED_SERVERS_ENABLED
```
static final boolean DEFAULT_T3_ROUTE_ONLY_TO_TRUSTED_SERVERS_ENABLED
```
    Default value for T3RouteOnlyToTrustedServersEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_CROSS_DOMAIN_T3_S_CONNECTION_TRUST_VALIDATION_ENABLED
```
static final boolean DEFAULT_CROSS_DOMAIN_T3_S_CONNECTION_TRUST_VALIDATION_ENABLED
```
    Default value for CrossDomainT3SConnectionTrustValidationEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_IIOP_UNAUTHENTICATED_SERVICE_CONTEXT_VALUE_TYPE_FILTERING_ENABLED
```
static final boolean DEFAULT_IIOP_UNAUTHENTICATED_SERVICE_CONTEXT_VALUE_TYPE_FILTERING_ENABLED
```
    Default value for IIOPUnauthenticatedServiceContextValueTypeFilteringEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_IIOP_TYPED_READ_RESOLVE_PROXY_VALIDATION_ENABLED
```
static final boolean DEFAULT_IIOP_TYPED_READ_RESOLVE_PROXY_VALIDATION_ENABLED
```
    Default value for IIOPTypedReadResolveProxyValidationEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_IIOP_STRICT_REMOTE_BUSINESS_INTERFACE_VALIDATION_ENABLED
```
static final boolean DEFAULT_IIOP_STRICT_REMOTE_BUSINESS_INTERFACE_VALIDATION_ENABLED
```
    Default value for IIOPStrictRemoteBusinessInterfaceValidationEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_JNDI_BINDING_AUTHORIZATION_POLICY_ENABLED
```
static final boolean DEFAULT_JNDI_BINDING_AUTHORIZATION_POLICY_ENABLED
```
    Default value for JNDIBindingAuthorizationPolicyEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_JNDI_OUTBOUND_CONNECTIONS_ALLOW_LIST_ENABLED
```
static final boolean DEFAULT_JNDI_OUTBOUND_CONNECTIONS_ALLOW_LIST_ENABLED
```
    Default value for JNDIOutboundConnectionsAllowListEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_JNDI_ADDITIONAL_FACTORIES_ALLOW_LISTS_ENABLED
```
static final boolean DEFAULT_JNDI_ADDITIONAL_FACTORIES_ALLOW_LISTS_ENABLED
```
    Default value for JNDIAdditionalFactoriesAllowListsEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_WL_PROXY_CLIENT_CERTIFICATE_CHAIN_VALIDATION_ENABLED
```
static final boolean DEFAULT_WL_PROXY_CLIENT_CERTIFICATE_CHAIN_VALIDATION_ENABLED
```
    Default value for WLProxyClientCertificateChainValidationEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_WSAT_REGISTRATION_SECRET_ENABLED
```
static final boolean DEFAULT_WSAT_REGISTRATION_SECRET_ENABLED
```
    Default value for WSATRegistrationSecretEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_JAXWS_REJECT_UNKNOWN_SEI_OPERATIONS_ENABLED
```
static final boolean DEFAULT_JAXWS_REJECT_UNKNOWN_SEI_OPERATIONS_ENABLED
```
    Default value for JAXWSRejectUnknownSEIOperationsEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_SPRING_JTA_DESERIALIZATION_JNDI_LOOKUP_DISABLED
```
static final boolean DEFAULT_SPRING_JTA_DESERIALIZATION_JNDI_LOOKUP_DISABLED
```
    Default value for SpringJtaDeserializationJndiLookupDisabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_WORK_CONTEXT_CLASS_VALIDATION_ENABLED
```
static final boolean DEFAULT_WORK_CONTEXT_CLASS_VALIDATION_ENABLED
```
    Default value for WorkContextClassValidationEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_WSAT_IGNORE_UNKNOWN_REPLAY_COMPLETION_ENABLED
```
static final boolean DEFAULT_WSAT_IGNORE_UNKNOWN_REPLAY_COMPLETION_ENABLED
```
    Default value for WSATIgnoreUnknownReplayCompletionEnabled.
    
    See Also:
    
    Constant Field Values
  - DEFAULT_T3_LEGACY_CROSS_DOMAIN_CREDENTIAL_JVMID_REPLAY_PROTECTION_ENABLED
```
static final boolean DEFAULT_T3_LEGACY_CROSS_DOMAIN_CREDENTIAL_JVMID_REPLAY_PROTECTION_ENABLED
```
    Default value for T3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled.
    
    See Also:
    
    Constant Field Values
- Method Detail
  - isSAML2StrictArtifactResolutionEnabled
```
boolean isSAML2StrictArtifactResolutionEnabled()
```
    Specifies whether SAML 2.0 artifact-resolution requesters must be authenticated before accessing the artifact cache.
    
    When enabled, WebLogic Server requires an enabled partner matching the request issuer, validates configured authentication and any supplied or required signature, and consumes the artifact only for an authenticated intended recipient. A verified signature or a partner-matched TLS client certificate is required; shared Basic authentication alone does not identify a partner.
    
    This protection is enabled by default. Configure request signing or partner-matched TLS client authentication at both partners. Set this attribute to false only when legacy interoperability is required; doing so permits artifact retrieval before authentication and disables this protection. Unsetting the attribute restores the enabled default. A change takes effect for subsequent requests without restarting the server.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_SAML2_STRICT_ARTIFACT_RESOLUTION
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setSAML2StrictArtifactResolutionEnabled
```
void setSAML2StrictArtifactResolutionEnabled(boolean enabled)
```
    Sets whether strict SAML 2.0 artifact resolution is enabled.
    
    Parameters:
    
    enabled - true to authenticate the intended recipient before consumption
    
    See Also:
    
    isSAML2StrictArtifactResolutionEnabled()
  - getSerializedWorkContextMaximumSize
```
int getSerializedWorkContextMaximumSize()
```
    Specifies the maximum allowed size, in bytes, of a serialized SerializableWorkContext payload read from a WorkArea input stream.
    
    A value of -1 disables the compatibility limit and preserves legacy behavior. To enable the limit, set this attribute to a positive byte count. A value of zero leaves the byte limit unapplied but keeps the additional unauthenticated deserialization filter enabled. Raise the value only if legitimate WorkContext payloads require more space.
    
    When this MBean is available, its effective value, including the default, takes precedence over the legacy weblogic.workarea.serializableWorkContext.maxLength JVM property.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_SERIALIZED_WORK_CONTEXT_MAXIMUM_SIZE
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
    
    Minimum Value:
    
    -1
  - setSerializedWorkContextMaximumSize
```
void setSerializedWorkContextMaximumSize(int bytes)
```
    Sets the value of the SerializedWorkContextMaximumSize attribute.
    
    Parameters:
    
    bytes - maximum serialized SerializableWorkContext payload size in bytes, zero for no byte limit with the additional unauthenticated deserialization filter, or -1 to disable the compatibility limit and that filter.
    
    See Also:
    
    getSerializedWorkContextMaximumSize()
  - getWorkContextInputMaximumASCIIFieldSize
```
int getWorkContextInputMaximumASCIIFieldSize()
```
    Specifies the maximum allowed size, in bytes, of an ASCII field read from the WorkArea binary encoding in which the field length is represented by a four-byte signed integer. This limit does not apply to transport-specific WorkContext encodings, including T3 and IIOP, which use separate decoding paths and are not governed by this attribute.
    
    A value of -1 leaves the cap unapplied and preserves legacy behavior. Every value greater than or equal to 0 is a literal byte cap; 0 has no special meaning and permits only zero-length ASCII fields. Raise the value only if legitimate WorkContext fields require more space.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_WORK_CONTEXT_INPUT_MAXIMUM_ASCII_FIELD_SIZE
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
    
    Minimum Value:
    
    -1
  - setWorkContextInputMaximumASCIIFieldSize
```
void setWorkContextInputMaximumASCIIFieldSize(int bytes)
```
    Sets the value of the WorkContextInputMaximumASCIIFieldSize attribute.
    
    Parameters:
    
    bytes - maximum WorkArea binary ASCII field size in bytes for the four-byte length encoding, or -1 to leave the cap unapplied.
    
    See Also:
    
    getWorkContextInputMaximumASCIIFieldSize()
  - isT3RouteOnlyToTrustedServersEnabled
```
boolean isT3RouteOnlyToTrustedServersEnabled()
```
    Returns whether T3 server routing is limited to trusted servers.
    
    When enabled, WebLogic Server requires routed T3 destinations to be known or configured before forwarding traffic. When disabled, WebLogic Server preserves legacy T3 server routing compatibility for trusted server-to-server messages whose destination is supplied on the wire.
    
    A value of true enables the tightened routing checks. A value of false preserves the legacy routing behavior.
    
    Returns:
    
    The T3 Route Only To Trusted Servers Enabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_T3_ROUTE_ONLY_TO_TRUSTED_SERVERS_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setT3RouteOnlyToTrustedServersEnabled
```
void setT3RouteOnlyToTrustedServersEnabled(boolean enabled)
```
    Sets the value of the T3 Route Only To Trusted Servers Enabled attribute.
    
    See Also:
    
    isT3RouteOnlyToTrustedServersEnabled()
  - isCrossDomainT3SConnectionTrustValidationEnabled
```
boolean isCrossDomainT3SConnectionTrustValidationEnabled()
```
    Returns whether reused cross-domain T3S connections require trust validation. When enabled, a reverse cross-domain lookup cannot reuse an established T3S connection and must pass a fresh SSL trust check. Changes take effect after the server is restarted.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_CROSS_DOMAIN_T3_S_CONNECTION_TRUST_VALIDATION_ENABLED
    
    Changes to this property take effect after you redeploy the module or restart the server. If the resource is in a partition, restart the partition.
  - setCrossDomainT3SConnectionTrustValidationEnabled
```
void setCrossDomainT3SConnectionTrustValidationEnabled(boolean enabled)
```
    Sets whether reused cross-domain T3S connections require trust validation.
    
    Parameters:
    
    enabled - true to require fresh cross-domain T3S trust validation
  - isIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled
```
boolean isIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled()
```
    Returns whether IIOP request and reply service-context valuetypes are filtered by the unauthenticated deserialization allowlist.
    
    When enabled, WebLogic Server applies the unauthenticated deserialization filter while reading IIOP request and reply service contexts. The filter does not apply to application values in request or reply bodies. When disabled, WebLogic Server preserves legacy IIOP service-context unmarshalling behavior.
    
    A value of true enables the tightened filtering. A value of false preserves legacy behavior.
    
    Returns:
    
    The IIOP Unauthenticated Service Context Value Type Filtering Enabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_IIOP_UNAUTHENTICATED_SERVICE_CONTEXT_VALUE_TYPE_FILTERING_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled
```
void setIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled(boolean enabled)
```
    Sets the IIOP Unauthenticated Service Context Value Type Filtering Enabled value.
    
    See Also:
    
    isIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled()
  - isIIOPTypedReadResolveProxyValidationEnabled
```
boolean isIIOPTypedReadResolveProxyValidationEnabled()
```
    Controls strict validation of typed IIOP serialization wrappers. When enabled, incompatible wire classes, including serialization wrappers, are rejected before readResolve(). When disabled, legacy typed IIOP readResolve proxy behavior is preserved.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_IIOP_TYPED_READ_RESOLVE_PROXY_VALIDATION_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setIIOPTypedReadResolveProxyValidationEnabled
```
void setIIOPTypedReadResolveProxyValidationEnabled(boolean enabled)
```
    Sets the IIOP Typed Read Resolve Proxy Validation Enabled value.
    
    See Also:
    
    isIIOPTypedReadResolveProxyValidationEnabled()
  - isIIOPStrictRemoteBusinessInterfaceValidationEnabled
```
boolean isIIOPStrictRemoteBusinessInterfaceValidationEnabled()
```
    Controls strict validation of IIOP business interfaces used during client stub generation.
    
    When enabled, WebLogic Server rejects a business interface that is not recognized as a remote interface. When disabled, WebLogic Server permits a locally visible plain business interface for a legacy IIOP client only when the IOR has no codebase.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_IIOP_STRICT_REMOTE_BUSINESS_INTERFACE_VALIDATION_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setIIOPStrictRemoteBusinessInterfaceValidationEnabled
```
void setIIOPStrictRemoteBusinessInterfaceValidationEnabled(boolean enabled)
```
    Sets the IIOP Strict Remote Business Interface Validation Enabled value.
    
    See Also:
    
    isIIOPStrictRemoteBusinessInterfaceValidationEnabled()
  - isJNDIBindingAuthorizationPolicyEnabled
```
boolean isJNDIBindingAuthorizationPolicyEnabled()
```
    Returns whether policy enforcement is enabled for authorization of JNDI namespace binding changes.
    
    When enabled, WebLogic Server applies tightened authorization and protocol checks before namespace write operations such as bind, rebind, unbind, rename, subcontext creation, sharable namespace mutation, or IIOP CosNaming mutation can change server-side JNDI bindings. When disabled, WebLogic Server preserves legacy remote JNDI mutation and protocol-specific mutation behavior.
    
    A value of true enables the tightened policy for this category. A value of false preserves legacy behavior.
    
    Returns:
    
    The JNDI Binding Authorization Policy Enabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_JNDI_BINDING_AUTHORIZATION_POLICY_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setJNDIBindingAuthorizationPolicyEnabled
```
void setJNDIBindingAuthorizationPolicyEnabled(boolean enabled)
```
    Sets the value of the JNDI Binding Authorization Policy Enabled attribute.
    
    See Also:
    
    isJNDIBindingAuthorizationPolicyEnabled()
  - isJNDIOutboundConnectionsAllowListEnabled
```
boolean isJNDIOutboundConnectionsAllowListEnabled()
```
    Returns whether the JNDI outbound connection allowlist is enabled.
    
    When enabled, WebLogic Server applies the SecurityConfigurationMBean.JNDIOutboundConnectionsAllowed allowlist to JNDI provider URLs and URL-shaped lookup inputs. When disabled, WebLogic Server preserves legacy outbound JNDI connection behavior.
    
    Returns:
    
    The JNDI Outbound Connections AllowList Enabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_JNDI_OUTBOUND_CONNECTIONS_ALLOW_LIST_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setJNDIOutboundConnectionsAllowListEnabled
```
void setJNDIOutboundConnectionsAllowListEnabled(boolean enabled)
```
    Sets the value of the JNDI Outbound Connections AllowList Enabled attribute.
    
    See Also:
    
    isJNDIOutboundConnectionsAllowListEnabled()
  - isJNDIAdditionalFactoriesAllowListsEnabled
```
boolean isJNDIAdditionalFactoriesAllowListsEnabled()
```
    Returns whether the JNDI additional factory allowlists are enabled.
    
    When enabled, WebLogic Server applies the SecurityConfigurationMBean.JNDIAdditionalInitialContextFactoriesAllowed and SecurityConfigurationMBean.JNDIAdditionalReferenceFactoriesAllowed allowlists before caller-supplied JNDI factories can be used. When disabled, WebLogic Server preserves legacy initial context factory and reference factory behavior.
    
    Returns:
    
    The JNDI Additional Factories AllowLists Enabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_JNDI_ADDITIONAL_FACTORIES_ALLOW_LISTS_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setJNDIAdditionalFactoriesAllowListsEnabled
```
void setJNDIAdditionalFactoriesAllowListsEnabled(boolean enabled)
```
    Sets the value of the JNDI Additional Factories AllowLists Enabled attribute.
    
    See Also:
    
    isJNDIAdditionalFactoriesAllowListsEnabled()
  - isWLProxyClientCertificateChainValidationEnabled
```
boolean isWLProxyClientCertificateChainValidationEnabled()
```
    Returns whether WebLogic Server validates certificate chains supplied in the WL-Proxy-Client-Cert header before using them for X.509 identity assertion.
    
    When enabled, WebLogic Server validates the proxy-supplied certificate chain against the configured WebLogic Server client certificate trust anchors before setting the jakarta.servlet.request.X509Certificate request attribute. Invalid, untrusted, expired, malformed, or otherwise unverifiable certificates are rejected. When disabled, WebLogic Server preserves the legacy proxy client certificate behavior.
    
    Returns:
    
    The WL Proxy Client Certificate Chain Validation Enabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_WL_PROXY_CLIENT_CERTIFICATE_CHAIN_VALIDATION_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setWLProxyClientCertificateChainValidationEnabled
```
void setWLProxyClientCertificateChainValidationEnabled(boolean enabled)
```
    Sets the value of the WL Proxy Client Certificate Chain Validation Enabled attribute.
    
    See Also:
    
    isWLProxyClientCertificateChainValidationEnabled()
  - isWSATRegistrationSecretEnabled
```
boolean isWSATRegistrationSecretEnabled()
```
    Controls whether WS-AT registration requires proof that the caller received the exported coordination context before participant enlistment.
    
    Enabling this attribute emits a per-transaction registration secret in WLS-generated coordination contexts and requires unauthenticated registration requests to echo the matching secret before enlistment. Set this attribute to false to preserve legacy WS-AT interoperability.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_WSAT_REGISTRATION_SECRET_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setWSATRegistrationSecretEnabled
```
void setWSATRegistrationSecretEnabled(boolean enabled)
```
    Sets the value of the WSATRegistrationSecretEnabled attribute.
    
    Parameters:
    
    enabled - true to enable WS-AT registration-secret enforcement
    
    See Also:
    
    isWSATRegistrationSecretEnabled()
  - isJAXWSRejectUnknownSEIOperationsEnabled
```
boolean isJAXWSRejectUnknownSEIOperationsEnabled()
```
    Specifies whether JAX-WS SEI endpoints reject requests whose SOAP operation does not resolve to an SEI method before invoking downstream tubes.
    
    When enabled, an unknown operation receives an Invalid operation SOAP fault before downstream processing, including WorkContext processing. When disabled, the request follows the legacy path, which invokes downstream tubes without method-level authorization for that operation. This protection is enabled by default. A change takes effect for subsequent requests without restarting the server.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_JAXWS_REJECT_UNKNOWN_SEI_OPERATIONS_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setJAXWSRejectUnknownSEIOperationsEnabled
```
void setJAXWSRejectUnknownSEIOperationsEnabled(boolean enabled)
```
    Sets whether unknown JAX-WS SEI operations are rejected before downstream processing.
    
    Parameters:
    
    enabled - true to reject unknown operations, false for legacy behavior
    
    See Also:
    
    isJAXWSRejectUnknownSEIOperationsEnabled()
  - isSpringJtaDeserializationJndiLookupDisabled
```
boolean isSpringJtaDeserializationJndiLookupDisabled()
```
    Controls whether Spring JtaTransactionManager skips resolving serialized JNDI names while deserializing.
    
    When enabled, transient JTA handles are not restored from serialized JNDI names. When disabled, WebLogic Server preserves the legacy Spring behavior of resolving serialized JNDI names during deserialization. WebLogic's configured JTA lookup during normal bean initialization is not affected.
    
    Returns:
    
    The Spring JTA Deserialization JNDI Lookup Disabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_SPRING_JTA_DESERIALIZATION_JNDI_LOOKUP_DISABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setSpringJtaDeserializationJndiLookupDisabled
```
void setSpringJtaDeserializationJndiLookupDisabled(boolean disabled)
```
    Sets whether Spring JtaTransactionManager skips resolving serialized JNDI names while deserializing.
    
    See Also:
    
    isSpringJtaDeserializationJndiLookupDisabled()
  - isWorkContextClassValidationEnabled
```
boolean isWorkContextClassValidationEnabled()
```
    Returns whether tightened validation is enabled for WorkContext implementation classes read from WorkArea input streams.
    
    When enabled, WebLogic Server validates WorkContext class names and resolved classes before constructing WorkContext implementations on T3, JMS, IIOP, legacy XML SOAP, and other WorkArea readers that apply this attribute. The tightened policy on those readers limits unauthenticated or untrusted inbound input to WebLogic built-in and product WorkContext implementations. Protocol compatibility paths can preserve SerializableWorkContext behavior, but authentication alone does not permit arbitrary custom WorkContext implementations when this attribute is enabled.
    
    Legacy XML WorkArea SOAP, when explicitly enabled with weblogic.wsee.workarea.workContext.oldFormat.support, applies these class checks before class initialization, construction, and readContext. The format opt-in is independent: this attribute does not enable that format. Disabling this attribute preserves legacy XML class admission; existing XML structural checks remain in effect.
    
    Custom WorkContexts created by server application code can propagate through collocated RMI calls between applications. WorkContexts admitted by the applicable WorkArea input factories, including XML and binary SOAP, retain their received origin. Subsequent collocated copies apply inbound validation under the effective policy, including to contexts received while this attribute was disabled. Deferred received SerializableWorkContext payloads retain their separate payload validation.
    
    A value of true enables the tightened WorkContext class checks. A value of false preserves legacy behavior for patch compatibility.
    
    Returns:
    
    The WorkContext Class Validation Enabled value
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_WORK_CONTEXT_CLASS_VALIDATION_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setWorkContextClassValidationEnabled
```
void setWorkContextClassValidationEnabled(boolean enabled)
```
    Sets the value of the WorkContext Class Validation Enabled attribute.
    
    See Also:
    
    isWorkContextClassValidationEnabled()
  - isWSATIgnoreUnknownReplayCompletionEnabled
```
boolean isWSATIgnoreUnknownReplayCompletionEnabled()
```
    Specifies whether WS-AT replay completion requests with no matching local transaction should be ignored instead of rolling back a recovery resource created from the caller-supplied ReplyTo endpoint.
    
    Enabling this attribute selects the hardened unknown-transaction replay completion behavior. Set this attribute to false to preserve legacy behavior.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_WSAT_IGNORE_UNKNOWN_REPLAY_COMPLETION_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setWSATIgnoreUnknownReplayCompletionEnabled
```
void setWSATIgnoreUnknownReplayCompletionEnabled(boolean enabled)
```
    Sets the value of the WSATIgnoreUnknownReplayCompletionEnabled attribute.
    
    Parameters:
    
    enabled - true to ignore unknown WS-AT replay completion requests, false to preserve legacy rollback behavior.
    
    See Also:
    
    isWSATIgnoreUnknownReplayCompletionEnabled()
  - isT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled
```
boolean isT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled()
```
    Specifies whether T3 RJVM identify processing should enable replay protection for JVMIDs signed by legacy cross-domain credentials.
    
    Enabling this attribute prevents a replayable legacy cross-domain credential-signed JVMID from promoting a freshly identified inbound RJVM to trusted-server state. Set this attribute to false to preserve legacy global-domain-trust behavior.
    
    Default Value:
    
    FeatureCompatibilityMBean.DEFAULT_T3_LEGACY_CROSS_DOMAIN_CREDENTIAL_JVMID_REPLAY_PROTECTION_ENABLED
    
    Changes to this property are dynamic and thus take effect immediately without restarting the server or partition.
  - setT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled
```
void setT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled(boolean enabled)
```
    Sets the value of the T3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled attribute.
    
    See Also:
    
    isT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled()

Interface FeatureCompatibilityMBean

Field Summary

Fields inherited from interface weblogic.management.configuration.ConfigurationMBean

Method Summary

Methods inherited from interface weblogic.management.configuration.ConfigurationMBean

Methods inherited from interface weblogic.descriptor.DescriptorBean

Methods inherited from interface javax.management.DynamicMBean

Methods inherited from interface javax.management.MBeanRegistration

Methods inherited from interface javax.management.NotificationBroadcaster

Methods inherited from interface weblogic.management.WebLogicMBean

Field Detail

DEFAULT_SERIALIZED_WORK_CONTEXT_MAXIMUM_SIZE

DEFAULT_WORK_CONTEXT_INPUT_MAXIMUM_ASCII_FIELD_SIZE

DEFAULT_STRICT_REPLICATION_AUTHORIZATION_ENABLED

DEFAULT_WLDF_SCRIPT_ACTION_PATH_RESTRICTION_ENABLED

DEFAULT_T3_ROUTE_ONLY_TO_TRUSTED_SERVERS_ENABLED

DEFAULT_CROSS_DOMAIN_T3_S_CONNECTION_TRUST_VALIDATION_ENABLED

DEFAULT_IIOP_UNAUTHENTICATED_SERVICE_CONTEXT_VALUE_TYPE_FILTERING_ENABLED

DEFAULT_IIOP_TYPED_READ_RESOLVE_PROXY_VALIDATION_ENABLED

DEFAULT_IIOP_STRICT_REMOTE_BUSINESS_INTERFACE_VALIDATION_ENABLED

DEFAULT_JNDI_BINDING_AUTHORIZATION_POLICY_ENABLED

DEFAULT_JNDI_OUTBOUND_CONNECTIONS_ALLOW_LIST_ENABLED

DEFAULT_JNDI_ADDITIONAL_FACTORIES_ALLOW_LISTS_ENABLED

DEFAULT_WL_PROXY_CLIENT_CERTIFICATE_CHAIN_VALIDATION_ENABLED

DEFAULT_WSAT_REGISTRATION_SECRET_ENABLED

DEFAULT_JAXWS_REJECT_UNKNOWN_SEI_OPERATIONS_ENABLED

DEFAULT_SPRING_JTA_DESERIALIZATION_JNDI_LOOKUP_DISABLED

DEFAULT_WORK_CONTEXT_CLASS_VALIDATION_ENABLED

DEFAULT_WSAT_IGNORE_UNKNOWN_REPLAY_COMPLETION_ENABLED

DEFAULT_T3_LEGACY_CROSS_DOMAIN_CREDENTIAL_JVMID_REPLAY_PROTECTION_ENABLED

Method Detail

isSAML2StrictArtifactResolutionEnabled

setSAML2StrictArtifactResolutionEnabled

getSerializedWorkContextMaximumSize

setSerializedWorkContextMaximumSize

getWorkContextInputMaximumASCIIFieldSize

setWorkContextInputMaximumASCIIFieldSize

isT3RouteOnlyToTrustedServersEnabled

setT3RouteOnlyToTrustedServersEnabled

isCrossDomainT3SConnectionTrustValidationEnabled

setCrossDomainT3SConnectionTrustValidationEnabled

isIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled

setIIOPUnauthenticatedServiceContextValueTypeFilteringEnabled

isIIOPTypedReadResolveProxyValidationEnabled

setIIOPTypedReadResolveProxyValidationEnabled

isIIOPStrictRemoteBusinessInterfaceValidationEnabled

setIIOPStrictRemoteBusinessInterfaceValidationEnabled

isJNDIBindingAuthorizationPolicyEnabled

setJNDIBindingAuthorizationPolicyEnabled

isJNDIOutboundConnectionsAllowListEnabled

setJNDIOutboundConnectionsAllowListEnabled

isJNDIAdditionalFactoriesAllowListsEnabled

setJNDIAdditionalFactoriesAllowListsEnabled

isWLProxyClientCertificateChainValidationEnabled

setWLProxyClientCertificateChainValidationEnabled

isWSATRegistrationSecretEnabled

setWSATRegistrationSecretEnabled

isJAXWSRejectUnknownSEIOperationsEnabled

setJAXWSRejectUnknownSEIOperationsEnabled

isSpringJtaDeserializationJndiLookupDisabled

setSpringJtaDeserializationJndiLookupDisabled

isWorkContextClassValidationEnabled

setWorkContextClassValidationEnabled

isWSATIgnoreUnknownReplayCompletionEnabled

setWSATIgnoreUnknownReplayCompletionEnabled

isT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled

setT3LegacyCrossDomainCredentialJVMIDReplayProtectionEnabled