From Dev.to
Java Serialization Filters Need an Explicit Class Policy
Java Serialization Filters Need an Explicit Class Policy Java deserialization is dangerous because constructing an object graph can invoke application code. An untrusted stream can select classes th...