BT
rss
Java Follow 837 Followers

Object Deserialisation Filters Backported from Java 9

by Abraham Marín Pérez Follow 8 Followers on  Mar 28, 2017

JEP 290, which allows filtering of incoming data when deserialising an object, and was initially targeted to Java 9, has been backported to Java 6, 7, and 8. The feature provides a mechanism to filter incoming data in an object input stream as it is being processed, and can help prevent deserialisation vulnerabilities like the one that affected Apache Commons and other libraries a while back.

Development Follow 550 Followers

SuperPack, a New Serialization Format with a Smaller Payload

by Abel Avram Follow 7 Followers on  Aug 27, 2016 5

Shape Security has open sourced a new schemaless binary serialization format called SuperPack.

Followers

Microsoft Open Sources Cross-platform Serialization Library – Bond

by Boris Lublinsky Follow 0 Followers on  Feb 03, 2015 1

Last month, without any official announcement, Microsoft open sourced Bond - a performant serialization system developed and deployed across dozens of mission-critical, high-scale infrastructure projects internally at Microsoft.

Followers

Json.NET Updates: Merge, Dependency Injection, F# and JSONPath Support

by Roopesh Shenoy Follow 0 Followers on  Aug 11, 2014

Json.NET 6.0 received 4 releases this year, the latest last week. Over these releases, several new features have been added, including several F# specific features, support for JSONPath querying, ability to integrate with Dependency Injection frameworks, ability to Merge JSON objects and more.

Login to InfoQ to interact with what matters most to you.


Recover your password...

Follow

Follow your favorite topics and editors

Quick overview of most important highlights in the industry and on the site.

Like

More signal, less noise

Build your own feed by choosing topics you want to read about and editors you want to hear from.

Notifications

Stay up-to-date

Set up your notifications and don't miss out on content that matters to you

BT