Uploaded image for project: 'JBoss Marshalling'
  1. JBoss Marshalling
  2. JBMAR-21

Add option for "secure" streams

    XMLWordPrintable

Details

    • Medium

    Description

      Add an option to enable "boxing in" of Exterializer, Externalizable, class annotation, and read/writeObject data. This is to prevent malicious objects from gaining unintended access to the steam data by overflowing their section. This should be an option however, because of the potential performance detriment.

      Attachments

        Activity

          People

            dlloyd@redhat.com David Lloyd
            dlloyd@redhat.com David Lloyd
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: