Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01KqJyCidz3ZgRyHABv2GVJh
7 lines
608 B
Plaintext
7 lines
608 B
Plaintext
application expects a Greeting and writes: String greeting = (Greeting) in.readObject()
|
|
>>> Noisy.readObject() is running -- code of the class named in the stream
|
|
ClassCastException AFTER the side effect: class com.ankurm.serialization.ReadObjectRunsCodeDemo$Noisy cannot be cast to class com.ankurm.serialization.ReadObjectRunsCodeDemo$Greeting (com.ankurm.serialization.ReadObjectRunsCodeDemo$Noisy and com.ankurm.serialization.ReadObjectRunsCodeDemo$Greeting are in unnamed module of loader 'app')
|
|
|
|
same bytes, allow-list filter that only admits Greeting:
|
|
InvalidClassException: filter status: REJECTED
|