Re:Oracle plans to dump risky Java serialization
by Const-me on Sunday May 27, 2018 @10:41PM
(#17170326)
They moved away from that. Many newer parts of the .NET framework (e.g. SOAP 1.2 implementation in WCF) use data contract serializers by default. With them, a complete list of known types must be provided to deserializer, it's typically done with [KnownType] attribute.
[ Parent
| on HN ]
There are no comments on this comment yet.