gson-comments/gson/src/main
Marcono1234 e6fae590cf
Prevent Java deserialization of internal classes (#1991)
Adversaries might be able to forge data which can be abused for DoS attacks.
These classes are already writing a replacement JDK object during serialization
for a long time, so this change should not cause any issues.
2021-10-13 10:14:57 -07:00
..
java Prevent Java deserialization of internal classes (#1991) 2021-10-13 10:14:57 -07:00
java-templates/com/google/gson/internal Private constructor (#1324) 2018-05-21 20:04:22 -07:00