Tsz-wo Sze created RATIS-2659:
---------------------------------
Summary: IOUtils. readObject(..) should set ObjectInputFilter
Key: RATIS-2659
URL: https://issues.apache.org/jira/browse/RATIS-2659
Project: Ratis
Issue Type: Improvement
Components: util
Reporter: Tsz-wo Sze
Assignee: Tsz-wo Sze
Attachments: image-2026-08-15-14-15-40-413.png
> Java : how to securely read an object from network using ObjectInputStream to
> avoid remote code execution?
According to Google AI responding to the question above, we should use
ObjectInputFilter in IOUtils. readObject(..).
!image-2026-08-15-14-15-40-413.png|width=600!
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
