3 ms·
You're sort of describing NSSecureCoding. Unfortunately, it's not used everywhere, and (because Cocoa relies heavily on internal class clusters) it still allow
by valleyer 5y ago
You're sort of describing NSSecureCoding. Unfortunately, it's not used everywhere, and (because Cocoa relies heavily on internal class clusters) it still allows subclasses of the specified class.
- olliej 5y agoI also recall one exploit that happened despite using nssecurecoding because a special internal class was a subclass of a secure coding class