On 02/06/2021 14:24, Markus Koschany wrote:
Hi Emilio,
Am Mittwoch, den 02.06.2021, 12:26 +0200 schrieb Emilio Pozuelo Monfort:
I think it is time
we declare the block list unsupported, asking users to switch to the allow
list.
Thoughts?
I believe it is sensible to switch to the whitelist by default after we have
tested the reverse-dependencies. This is quite similar to jackson-databind.
Ack. I added this to [de]la-needed. Indeed some testing and/or code inspection
on the rdeps will be needed.
Cheers,
Emilio
