You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@lucene.apache.org by "Robert Muir (Jira)" <ji...@apache.org> on 2019/12/16 13:17:00 UTC

[jira] [Created] (SOLR-14095) Remove serialization or support serialization filtering

Robert Muir created SOLR-14095:
----------------------------------

             Summary: Remove serialization or support serialization filtering
                 Key: SOLR-14095
                 URL: https://issues.apache.org/jira/browse/SOLR-14095
             Project: Solr
          Issue Type: Task
      Security Level: Public (Default Security Level. Issues are Public)
            Reporter: Robert Muir


Removing the use of serialization is greatly preferred.

But if serialization over the wire must really happen, then we must use JDK's serialization filtering capability to prevent havoc.
https://docs.oracle.com/javase/10/core/serialization-filtering1.htm#JSCOR-GUID-3ECB288D-E5BD-4412-892F-E9BB11D4C98A



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org