[MATH-1324] RNGs implement "Serializable" (package "o.a.cm.random")

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Won't Fix
• Affects Version/s: 3.6
• Labels: API security
• Assignee: Unassigned
• Reporter: Gilles Sadowski
• Created: 13/Feb/16 15:10
• Updated: 13/Feb/16 15:12
• Resolved: 13/Feb/16 15:12

Description

Classes should not implement the Serializable if they are not ready to handle the necessary steps to avoid security issues:

1. http://javajee.com/best-practices-for-serialization-in-java
2. http://www.xyzws.com/javafaq/what-are-the-precautions-for-implementing-serializable/53
3. https://tersesystems.com/2015/11/08/closing-the-open-door-of-java-object-serialization/

Issue Links

• is superceded by: MATH-1319 Refactor the package "o.a.c.m.random"