Login
From:
The Fishbowl
(Uncensored)
subscribe
The Java Deserialization Bug
https://fishbowl.pastiche.org/2015/11/09/java_serialization_bug/
links
backlinks
Roast topics
Find topics
Find it!
Arbitrary object deserialization (or marshalling, or un-pickling, whatever your language calls it) is inherently unsafe, and should never be performed on untrusted data.
