[#1453] upgrade dubbo-serialization-hessian2 version to 3.3.4 (#1454) (#1467)

Author: chengyouling

integration-tests/discovery-nacos-tests/common/src/main/java/com/huaweicloud/sample/hessian/NonSerializableModel.java

@@ -16,7 +16,11 @@
  */
 package com.huaweicloud.sample.hessian;
 
-public class NonSerializableModel {
+import java.io.Serializable;
+
+public class NonSerializableModel implements Serializable {
+  private static final long serialVersionUID = -1L;
+
   private String age;
 
   public String getAge() {

integration-tests/discovery-servicecomb-tests/common/src/main/java/com/huaweicloud/sample/hessian/NonSerializableModel.java

@@ -16,7 +16,11 @@
  */
 package com.huaweicloud.sample.hessian;
 
-public class NonSerializableModel {
+import java.io.Serializable;
+
+public class NonSerializableModel implements Serializable {
+  private static final long serialVersionUID = -1L;
+
   private String age;
 
   public String getAge() {

spring-cloud-huawei-dependencies/pom.xml

@@ -45,8 +45,8 @@
     <resilience4j.version>1.7.0</resilience4j.version>
     <jasypt.version>3.0.5</jasypt.version>
     <annotations.version>3.0.1</annotations.version>
-    <dubbo.hessian.version>2.7.23</dubbo.hessian.version>
     <springdoc.version>1.6.8</springdoc.version>
+    <dubbo.hessian.version>3.3.4</dubbo.hessian.version>
     <nacos.client.version>2.3.0</nacos.client.version>
     <alibaba.context.support.version>1.0.11</alibaba.context.support.version>
     <spring-framework.version>5.3.39</spring-framework.version>

spring-cloud-starter-huawei/spring-cloud-starter-huawei-hessian/src/main/java/com/huaweicloud/hessian/Hessian2ObjectInput.java

@@ -39,6 +39,8 @@
 import org.apache.dubbo.common.serialize.Cleanable;
 import org.apache.dubbo.common.serialize.ObjectInput;
 import org.apache.dubbo.common.serialize.hessian2.Hessian2SerializerFactory;
+import org.apache.dubbo.common.utils.DefaultSerializeClassChecker;
+import org.apache.dubbo.common.utils.SerializeCheckStatus;
 
 import com.alibaba.com.caucho.hessian.io.Hessian2Input;
 
@@ -50,7 +52,10 @@ public class Hessian2ObjectInput implements ObjectInput, Cleanable {
 
   private static ThreadLocal<Hessian2Input> INPUT_TL = ThreadLocal.withInitial(() -> {
     Hessian2Input h2i = new Hessian2Input(null);
-    Hessian2SerializerFactory factory = new Hessian2SerializerFactory();
+    ClassLoader loader = Hessian2ObjectInput.class.getClassLoader();
+    DefaultSerializeClassChecker classChecker = DefaultSerializeClassChecker.getInstance();
+    classChecker.notifyCheckStatus(SerializeCheckStatus.WARN);
+    Hessian2SerializerFactory factory = new Hessian2SerializerFactory(loader, classChecker);
     factory.setAllowNonSerializable(true);
     h2i.setSerializerFactory(factory);
     h2i.setCloseStreamOnClose(true);

spring-cloud-starter-huawei/spring-cloud-starter-huawei-hessian/src/main/java/com/huaweicloud/hessian/Hessian2ObjectOutput.java

@@ -38,6 +38,8 @@
 import org.apache.dubbo.common.serialize.Cleanable;
 import org.apache.dubbo.common.serialize.ObjectOutput;
 import org.apache.dubbo.common.serialize.hessian2.Hessian2SerializerFactory;
+import org.apache.dubbo.common.utils.DefaultSerializeClassChecker;
+import org.apache.dubbo.common.utils.SerializeCheckStatus;
 
 import com.alibaba.com.caucho.hessian.io.Hessian2Output;
 
@@ -49,7 +51,10 @@ public class Hessian2ObjectOutput implements ObjectOutput, Cleanable {
 
   private static ThreadLocal<Hessian2Output> OUTPUT_TL = ThreadLocal.withInitial(() -> {
     Hessian2Output h2o = new Hessian2Output(null);
-    Hessian2SerializerFactory factory = new Hessian2SerializerFactory();
+    ClassLoader loader = Hessian2ObjectOutput.class.getClassLoader();
+    DefaultSerializeClassChecker classChecker = DefaultSerializeClassChecker.getInstance();
+    classChecker.notifyCheckStatus(SerializeCheckStatus.WARN);
+    Hessian2SerializerFactory factory = new Hessian2SerializerFactory(loader, classChecker);
     factory.setAllowNonSerializable(true);
     h2o.setSerializerFactory(factory);
     h2o.setCloseStreamOnClose(true);