[ 
https://issues.apache.org/jira/browse/AMQ-7438?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17105107#comment-17105107
 ] 

ASF subversion and git services commented on AMQ-7438:
------------------------------------------------------

Commit a73a85e6c21ac2905feb162d9132993b231f391b in activemq's branch 
refs/heads/master from Colm O hEigeartaigh
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=a73a85e ]

AMQ-7438 - Harden deserialization


> Harden deserialization
> ----------------------
>
>                 Key: AMQ-7438
>                 URL: https://issues.apache.org/jira/browse/AMQ-7438
>             Project: ActiveMQ
>          Issue Type: Improvement
>            Reporter: Colm O hEigeartaigh
>            Assignee: Colm O hEigeartaigh
>            Priority: Minor
>             Fix For: 5.16.0, 5.15.13
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> There are a few instances in the codebase where we can harden 
> deserialization, to make it harder for an attacker to try to deserialize to a 
> "gadget" class.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to