Community

Java deserialization flaws: Part 2, XML deserialization

(djorm) All classes which implement the java.io.Serializable interface can be serialized and deserialized, with Java handling the plumbing automatically. In the first part of this two-part series, we looked at some of the unexpected security consequences which can arise from usage of binary deserial

Read More - Register for Free Membership