Saturday, November 21, 2015

Re: Java Deserialization Vulnerability

I am not very well versed into that kind of things, but how is it possible if gwt uses a white list of classes for serialization and deserialization?

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To post to this group, send email to google-web-toolkit@googlegroups.com.
Visit this group at http://groups.google.com/group/google-web-toolkit.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment