...
| Wiki Markup |
|---|
Serialization can be used maliciously, for example, to return multiple instances of a singleton class object. In this noncompliant code example (based on \[[Bloch 2005|AA. Bibliography#BlochReferences#Bloch 05]\]), a subclass {{SensitiveClass}} inadvertently becomes serializable because it extends the {{java.lang.Number}} class, which implements {{Serializable}}. |
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ca65b13bd3516f85-7c5ef1e4-4e95425e-8e83a2b9-32cfefaff52630fd92b8bfae"><ac:plain-text-body><![CDATA[ | [[Bloch 2005 | AA. Bibliography#Bloch References#Bloch 05]] | Puzzle 83. Dyslexic monotheism | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a093ae4b7fd37a6f-171cd14f-49e34e7c-be6887e8-71a48a90992d509847cf0c3a"><ac:plain-text-body><![CDATA[ | [[Bloch 2001 | AA. Bibliography#Bloch References#Bloch 01]] | Item 1. Enforce the singleton property with a private constructor | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="bda192717c9548f9-b068126c-4054446c-9e32b34b-aa6a2ff0916c864c1e0c1eb5"><ac:plain-text-body><![CDATA[ | [[Greanier 2000 | AA. Bibliography#Greanier References#Greanier 00]] | [Discover the Secrets of the Java Serialization API | http://java.sun.com/developer/technicalArticles/Programming/serialization/] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="6714f2e8c999bd32-14e4d593-491a405f-8a4b9f1c-0c3cf36c7735f3a409dc0520"><ac:plain-text-body><![CDATA[ | [[Harold 1999 | AA. Bibliography#Harold References#Harold 99]] |
| ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ef2d206d5d8d24c5-e85cc0a8-48ae4157-8c37b983-0af2c012ae038e034f0a8542"><ac:plain-text-body><![CDATA[ | [[JLS 2005 | AA. Bibliography#JLS References#JLS 05]] | [Transient Modifier | http://java.sun.com/docs/books/jls/third_edition/html/classes.html#37020] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b1f2e47c47a992b1-4b377507-40c548c5-a6a296bd-8634524dd8e9f188d5d9689f"><ac:plain-text-body><![CDATA[ | [[Long 2005 | AA. Bibliography#Long References#Long 05]] | Section 2.4, Serialization | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="5577fea416bfa823-04a7dfa5-4c9d4630-860b800c-42b1095cf3232b46c2c7dc13"><ac:plain-text-body><![CDATA[ | [[Sun 2006 | AA. Bibliography#Sun References#Sun 06]] | Serialization Specification, A.4, Preventing Serialization of Sensitive Data | ]]></ac:plain-text-body></ac:structured-macro> |
...