Login
From:
The Fishbowl
(Uncensored)
subscribe
The Java Deserialization Bug
https://fishbowl.pastiche.org/2015/11/09/java_serialization_bug/
links
backlinks
Arbitrary object deserialization (or marshalling, or un-pickling, whatever your language calls it) is inherently unsafe, and should never be performed on untrusted data.
Roast topics
Find topics
Roast it!
Roast topics
Find topics
Find it!
Roast topics
Find topics
Find it!
