Uploaded image for project: 'Lucene - Core'
  1. Lucene - Core
  2. LUCENE-9095

remove java serialization from lucene/replicator

    XMLWordPrintableJSON

Details

    • Task
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • modules/replicator
    • None

    • re

    • New

    Description

      This seems to be deserializing java objects from http streams.

      In LUCENE-9094 I marked the usages with SuppressForbidden, just to try to fend off additional serialization from being added to the codebase.

      But we should really fix this one!

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. LUCENE-9094 Ban ObjectInputStream and ObjectOutputStream in forbidden-apis

          • Major - Major loss of function.
          • Closed

          Activity

            People

              Unassigned Unassigned
              rcmuir Robert Muir
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: