Robert Muir created SOLR-14095:
----------------------------------

             Summary: Remove serialization or support serialization filtering
                 Key: SOLR-14095
                 URL: https://issues.apache.org/jira/browse/SOLR-14095
             Project: Solr
          Issue Type: Task
      Security Level: Public (Default Security Level. Issues are Public)
            Reporter: Robert Muir


Removing the use of serialization is greatly preferred.

But if serialization over the wire must really happen, then we must use JDK's 
serialization filtering capability to prevent havoc.
https://docs.oracle.com/javase/10/core/serialization-filtering1.htm#JSCOR-GUID-3ECB288D-E5BD-4412-892F-E9BB11D4C98A



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to