spring-security-oauth2/src/main/java/org/springframework/security/oauth2/common/util/SerializationUtils.java
/**
		 * Check if the class is allowed to be deserialized.
		 *
		 * @param className the class to check
		 * @return true if the class is not allowed to be deserialized, false otherwise
		 */
Check if the class is allowed to be deserialized.
@param className the class to check
@return true if the class is not allowed to be deserialized, false otherwise
Check if the class is allowed to be deserialized . @param className the class to check @return true if the class is not allowed to be deserialized false otherwise
private boolean isProhibited(String className) {
			for (String allowedClass : this.allowedClasses) {
				if (className.startsWith(allowedClass)) {
					return false;
				}
			}
			return true;
		}
private boolean isProhibited ( String className ) { for ( String allowedClass : this . allowedClasses ) { if ( className . startsWith ( allowedClass ) ) { return false ; } } return true ; }
Check if the class is allowed to be deserialized.
Check if the class is allowed to be deserialized .