You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@beam.apache.org by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2020/03/27 12:40:00 UTC
[jira] [Assigned] (BEAM-9570) Update documentation to show how to
use SerializableCoder more securely
[ https://issues.apache.org/jira/browse/BEAM-9570?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh reassigned BEAM-9570:
-----------------------------------------
Assignee: (was: Colm O hEigeartaigh)
> Update documentation to show how to use SerializableCoder more securely
> -----------------------------------------------------------------------
>
> Key: BEAM-9570
> URL: https://issues.apache.org/jira/browse/BEAM-9570
> Project: Beam
> Issue Type: Improvement
> Components: sdk-java-core
> Reporter: Colm O hEigeartaigh
> Priority: Major
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> It's possible to harden the deserialization process in SerializableCoder by enforcing that deserialization will only take place if the root object matches the type that the SerializableCoder is associated with.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)