code: public static boolean contains(String className) {
      if (className.startsWith("javax.")) {
        return !isBundledInJre(className) || WHITELIST.contains(className);
      } else if (className.startsWith("java.")
          || className.startsWith("sun.util.")
          || className.startsWith("org.xml.sax.")
          || className.startsWith("org.w3c.dom.")
          || className.startsWith("org.omg.")
          || className.startsWith("org.ietf.jgss.")
          // com.sun and com.oracle packages are tricky. Some are in the JRE. Some aren't.
          || className.startsWith("com.sun.jmx.")
          || className.startsWith("com.sun.jndi.")
          || className.startsWith("com.sun.media.")
          || className.startsWith("com.sun.management.")
          || className.startsWith("com.sun.beans.")
          || className.startsWith("com.sun.corba.")
          || className.startsWith("com.sun.awt.")
          || className.startsWith("com.sun.swing.")
          || className.startsWith("com.sun.rmi.")
          || className.startsWith("com.sun.xml.")
          || className.startsWith("com.sun.java.")
          || className.startsWith("com.sun.org.")
          || className.startsWith("com.sun.rowset.")
          || className.startsWith("com.oracle.net.")
          || className.startsWith("com.oracle.nio.")
          || className.startsWith("com.oracle.util.")) {
        return WHITELIST.contains(className);
      } else { // not a JRE class
        return true;
      }
    }
docs: Determine whether class is allowed in App Engine Standard.
  
  @param className fully package qualified class name
  @return true if this class is allowed in Java 7 on App Engine Standard, false otherwise