Oracle plans to dump risky Java serialization
I was trying to understand if C# has the same issue. From what I can tell, as long as you use the default serialization, it seems to be safe. But I can't really tell.<p><a href="https://www.alphabot.com/security/blog/2017/net/How-to-configure-Json.NET-to-create-a-vulnerable-web-API.html" rel="nofollow">https://www.alphabot.com/security/blog/2017/net/How-to-confi...</a>