I deploy a RMI Service ,write a RMI Client(Java SE project) to access it and is ok, but the some code in web project, I use wireshark to find that every RMI request sent from our client to our server containing the list of all jars in the classpath for the application.
My problem is similar to https://bugs.java.com/bugdatabase/view_bug?bug_id=6664389
How to solve it?
Don't use the codebase feature. It is rather rarely used, particularly in the client -> server direction. It won't work unless the peer is using a security manager. In other words don't set the java.rmi.server.codebase system property at the client.
Or are you using Java Web Start as per the bug report and haven't told us?