And Ruby [0] and Python [1] and... Nothing about Java or it's community makes it any more prone than most other languages to exposing deserialisation into arbi

And Ruby [0] and Python [1] and... Nothing about Java or it's community makes it any more prone than most other languages to exposing deserialisation into arbitrary objects. [0] https://github.com/mazen160/struts-pwn_CVE-2017-9805/blob/master/struts-pwn.py https://github.com/mazen160/struts-pwn_CVE-2017-9805/blob/ma... [1] https://blog.nelhage.com/2011/03/exploiting-pickle/ https://blog.nelhage.com/2011/03/exploiting-pickle/