...
Wiki Markup |
---|
\[[SCG 07|AA. Java References#SCG 07]\] Guideline 5-3 Duplicate the SecurityManager checks enforced in a class during serialization and deserialization \[[Long 05|AA. Java References#Long 05]\] Section 2.4, Serialization |
...
SER30SER31-J. Do not serialize sensitive data 08. Input Output (FIO) FIO32-J. Ensure all resources are properly closed when they are no longer neededValidate deserialized objects 12. Serialization (SER) SER33-J. Do not serialize instances of inner classes