Home / Topics / Serialization 🏷 Serialization 1 patterns Topic: Serialization All Java patterns related to Serialization — java.evolved I/O Deserialization filters Old // Dangerous: accepts any class ObjectInputStream ois = new ObjectInputStream(input); Object obj = ois.readObject(); // deserialization attacks possible! Modern ObjectInputFilter filter = ObjectInputFilter.Config .createFilter( "com.myapp.*;!*" ); ois.setObjectInputFilter(filter); Object obj = ois.readObject(); hover to see modern →