novatechflow commented on PR #838: URL: https://github.com/apache/wayang/pull/838#issuecomment-6335608733
- Allowlist bypass: `Number.class` still permits arbitrary subclasses, and specifying a payload type trusts unrelated classes in its package. Custom `readObject()` hooks execute in both cases. - Fresh Flink values: a no-argument `WayangValue` still rejects valid custom payloads with `InvalidClassException`. - New tests manually supply the type; Flink’s fresh-value path is still uncovered. Immutable collections now round-trip correctly, and deserialization failures propagate instead of silently returning null. Great work! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
