[ 
https://issues.apache.org/jira/browse/AMQ-7438?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jean-Baptiste Onofré updated AMQ-7438:
--------------------------------------
    Component/s: KahaDB

> Harden deserialization
> ----------------------
>
>                 Key: AMQ-7438
>                 URL: https://issues.apache.org/jira/browse/AMQ-7438
>             Project: ActiveMQ
>          Issue Type: Improvement
>          Components: Broker, KahaDB
>            Reporter: Colm O hEigeartaigh
>            Assignee: Colm O hEigeartaigh
>            Priority: Minor
>             Fix For: 5.16.0, 5.15.13
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> There are a few instances in the codebase where we can harden 
> deserialization, to make it harder for an attacker to try to deserialize to a 
> "gadget" class.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to