17. Edge Case: Avoid Java Serialization

Edge Case: Avoid Java Serialization

In this section, you will learn how to explain why Java serialization should be avoided.

It's valuable to understand that Java's built-in object serialization exists, and how to use it, but most of the time you should avoid using it due to critical security issues.

Further Reading

• OWASP Deserialization of Untrusted Data