Explicit Serialization API and Security

[Peter Levart]

On 01/06/2015 04:03 PM, Peter Levart wrote:
> private void readObject(ObjectInputStream in) throws IOException, 
> ClassNotFoundException {
>         ObjectInputStream.GetField fields = in.readFields(); // this 
> already validates the types 

Well, not true currently. But type validation could be added at this point.

Peter