This is an automated email from the ASF dual-hosted git repository.
Abacn pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new a164cdaaf29 Add warning for KryoCoder deserialization (#40456)
a164cdaaf29 is described below
commit a164cdaaf2911f23c6301241c99074385854d985
Author: Yi Hu <[email protected]>
AuthorDate: Fri Oct 9 15:15:15 2026 -0400
Add warning for KryoCoder deserialization (#40456)
---
.../main/java/org/apache/beam/sdk/extensions/kryo/KryoCoder.java | 7 +++++++
1 file changed, 7 insertions(+)
diff --git
a/sdks/java/extensions/kryo/src/main/java/org/apache/beam/sdk/extensions/kryo/KryoCoder.java
b/sdks/java/extensions/kryo/src/main/java/org/apache/beam/sdk/extensions/kryo/KryoCoder.java
index 8f6660cf5b7..e89a61f43ab 100644
---
a/sdks/java/extensions/kryo/src/main/java/org/apache/beam/sdk/extensions/kryo/KryoCoder.java
+++
b/sdks/java/extensions/kryo/src/main/java/org/apache/beam/sdk/extensions/kryo/KryoCoder.java
@@ -41,6 +41,13 @@ import org.checkerframework.checker.nullness.qual.Nullable;
* Coder using Kryo as (de)serialization mechanism. See {@link
KryoCoderProvider} to get more
* details about usage.
*
+ * <p><b>Warning:</b> Kryo deserialization (especially with the default {@code
+ * kryoRegistrationRequired=false} setting in {@link KryoOptions}) can
instantiate arbitrary classes
+ * and is unsafe when applied to untrusted data. Do not use {@link KryoCoder}
to deserialize
+ * untrusted external input. To restrict deserialization to an explicit set of
allowed classes,
+ * enable {@link KryoOptions#setKryoRegistrationRequired(boolean)} and
register classes via {@link
+ * KryoRegistrar}.
+ *
* @param <T> type of element coder can handle
*/
public class KryoCoder<T> extends CustomCoder<T> {
