type is registered with Kryo or not.
[1] https://issues.apache.org/jira/browse/FLINK-25993
Best regards,
Shane
From: Chesnay Schepler
Sent: February 7, 2022 3:08 AM
To: Shane Bishop ; user@flink.apache.org
Subject: Re: Questions about Kryo
Sent: February 7, 2022 3:08 AM
To: Shane Bishop ; user@flink.apache.org
Subject: Re: Questions about Kryo setRegistrationRequired(false)
There isn't any setting to control setRegistrationRequired().
You can however turn Kryo off via ExecutionConfig#disableGenericTypes, although
this may
There isn't any setting to control setRegistrationRequired().
You can however turn Kryo off via ExecutionConfig#disableGenericTypes,
although this may require changes to your data types.
I'd recommend to file a ticket.
On 04/02/2022 20:12, Shane Bishop wrote:
Hi all,
TL;DR: I am concerned
Hi all,
TL;DR: I am concerned that kryo.setRegistrationRequired(false) in Apache Flink
might introduce serialization/deserialization vulnerabilities, and I want to
better understand the security implications of its use in Flink.
There is an issue on the Kryo GitHub repo
