Explicit Serialization API and Security
peter.levart at gmail.com
Wed Jan 14 20:56:24 UTC 2015
On 01/14/2015 12:37 PM, Chris Hegarty wrote:
>> What do you think?
> I agree completely.
> An API at the level that you are proposing will provide the necessary
> functionality and flexibility that is required to do validation in
> readObject. As you clearly stated, and is already the case, validation
> in this way can depend on supertype state.
> Failure automicity of the whole type hierarchy is the only thing that
> is missing, but I think that could possibly be built on top, or solved
> in a different way. I don't see that as being a blocker for moving
> this forward. This proposal stands on its own merits.
> Is this something that you want to actively flesh out? If not, I can
> try to help move this forward.
I can prepare a prototype, yes. Just give me a couple of days.
More information about the core-libs-dev