2 Serialization Filtering

You can use the Java serialization filtering mechanism to help prevent deserialization vulnerabilities. You can define pattern-based filters or you can create custom filters.

Topics:

• Addressing Deserialization Vulnerabilities
• Java Serialization Filters
• Filter Factories
• Allow-Lists and Reject-Lists
• Creating Pattern-Based Filters
• Creating Custom Filters
• Setting a Filter Factory
• Built-in Filters
• Logging Filter Actions