[
https://issues.apache.org/jira/browse/AMQ-7438?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17105109#comment-17105109
]
ASF subversion and git services commented on AMQ-7438:
------------------------------------------------------
Commit 1f914bba659de4c7364771a8e6bfb86528cc5cc8 in activemq's branch
refs/heads/master from Jean-Baptiste Onofré
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=1f914bb ]
Merge pull request #502 from coheigea/AMQ-7438
AMQ-7438 - Harden deserialization
> Harden deserialization
> ----------------------
>
> Key: AMQ-7438
> URL: https://issues.apache.org/jira/browse/AMQ-7438
> Project: ActiveMQ
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Priority: Minor
> Fix For: 5.16.0, 5.15.13
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> There are a few instances in the codebase where we can harden
> deserialization, to make it harder for an attacker to try to deserialize to a
> "gadget" class.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
