[IGNITE-3087] WebSessions: session objects are deserialized on the server.

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.5.0.final
• Fix Version/s: 1.6
• Component/s: websession
• Labels: important
• Assignee: Vladimir Ozerov
• Reporter: Vladimir Ozerov
• Created: 05/May/16 05:59
• Updated: 17/May/16 10:59
• Resolved: 17/May/16 10:59

Description

Problem
1) WebSession and WebSessionListener$AttributesProcessor classes are Externalizable, so OptimziedMarshaller is used.
2) Both these classes pass objects directly. It means that even if force them to work through BinaryMarshaller, objects will be deserialized still. We need to rework this logic somehow.