On 10/01/2010 07:38 PM, Michal Kleczek wrote:
My idea would be as follows: a) _Never_ download code when deserializing data (objects) comming from the network (IOW MarshalledInputStream should behave like ObjectInputStream - use TCCL to load classes)
We need a "do not download" default and optional download permission. Gr. Sim
