[
https://issues.apache.org/jira/browse/AMQ-7438?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17105110#comment-17105110
]
ASF subversion and git services commented on AMQ-7438:
------------------------------------------------------
Commit 2342430e7fc42379c5c13283d1a7046609e1557a in activemq's branch
refs/heads/activemq-5.15.x from Colm O hEigeartaigh
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=2342430 ]
AMQ-7438 - Harden deserialization
(cherry picked from commit a73a85e6c21ac2905feb162d9132993b231f391b)
> Harden deserialization
> ----------------------
>
> Key: AMQ-7438
> URL: https://issues.apache.org/jira/browse/AMQ-7438
> Project: ActiveMQ
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Priority: Minor
> Fix For: 5.16.0, 5.15.13
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> There are a few instances in the codebase where we can harden
> deserialization, to make it harder for an attacker to try to deserialize to a
> "gadget" class.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
