weimin0426 opened a new issue, #14226: URL: https://github.com/apache/dubbo/issues/14226
### Pre-check - [X] I am sure that all the content I provide is in English. ### Search before asking - [X] I had searched in the [issues](https://github.com/apache/dubbo/issues?q=is%3Aissue) and found no similar issues. ### Apache Dubbo Component Java Benchmark (apache/dubbo-benchmark) ### Dubbo Version dubbo 3.2.5 ### Steps to reproduce this issue I have added some content to security/serialize.allowlist, eg: benchmark.service.UserServiceResponse  but after I package the project and put to the remote server, I got the message: cause: org.apache.dubbo.common.serialize.SerializationException: io.fury.exception.InsecureException: Class benchmark.service.UserServiceResponse isn't in allow list for serialization. If this class is allowed for serialization, please add it to allow list by AllowListChecker#addAllowClass then I unzip the jar files with jar -xf, I found security/serialize.allowlist was overwrite, it has the same content with the file in dubbo project ,which placed at security/serialize.allowlist.  ### What you expected to happen benchmark.service.UserServiceResponse defined in the security/serialize.allowlist can be affected ### Anything else _No response_ ### Are you willing to submit a pull request to fix on your own? - [ ] Yes I am willing to submit a pull request on my own! ### Code of Conduct - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
