in log4j-server/src/main/java/org/apache/logging/log4j/server/AbstractSocketServer.java [114:116]
List<String> getAllowedClasses() { return allowedClasses == null ? Collections.<String>emptyList() : allowedClasses; }