Oracle plans to dump risky Java serialization
I was trying to understand if C# has the same issue. From what I can tell, as long as you use the default serialization, it seems to be safe. But I can't really tell.https://www.alphabot.com/security/blog/2017/net/How-to-confi...