On 01.08.21 18:35, Michael Bien wrote:
On 01.08.21 16:28, Uwe Schindler wrote:The problem is: you deprecate for removal without offering any API to replace the main pain points:... - Disable damn java serialization completelyJDK 9+ JVM flag / security property, see JEP 290 -Djdk.serialFilter=!* regards, michael
(for deserialization only) -michael