Class ObjectDecoderInputStream

java.lang.Object
java.io.InputStream
io.netty.handler.codec.serialization.ObjectDecoderInputStream
All Implemented Interfaces:
Closeable, DataInput, ObjectInput, AutoCloseable
@Deprecated public class ObjectDecoderInputStream extends InputStream implements ObjectInput
Deprecated.
This class has been deprecated with no replacement, because serialization can be a security liability
An ObjectInput which is interoperable with ObjectEncoder and ObjectEncoderOutputStream.

Security: serialization can be a security liability, and should not be used without defining a list of classes that are allowed to be desirialized. Such a list can be specified with the jdk.serialFilter system property, for instance. See the serialization filtering article for more information.