4 ms·
Maybe not the best time to promote a library using Java serialization. Java Serialization is probably the number 1 source of serious Java vulnerabilities since
by WatchDog 5y ago
Maybe not the best time to promote a library using Java serialization.
Java Serialization is probably the number 1 source of serious Java vulnerabilities since applets, and it isn’t even particularly fast compared to other serialization libraries that target JSON or something else
- michael1999 5y agoIt works with xstream, and I’m sure it could support Jackson, or whatever. The hard part is picking which layer to serialize and resisting the urge to re-implement Dynamo.