jyemin commented on pull request #618: URL: https://github.com/apache/logging-log4j2/pull/618#issuecomment-992009288
Figuring out how to test this is definitely worthwhile, but I think I'm going to have to reconsider the approach. I had a closer look at `ObjectInputStream`, and realized that the `resolveClass` method is not called in all circumstances. In particular, it's not called if the object is a `String`, which I imagine is a common use case. I'm going to work on an alternative approach in which the serialized data is examined directly rather than indirectly through `ObjectInputStream`. How does that sound? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
