AliRana30 opened a new issue, #835: URL: https://github.com/apache/wayang/issues/835
### Description In [`ObjectFileSerialization.deserializeLegacy()`](file:///d:/Open-Source/wayang/wayang-commons/wayang-basic/src/main/java/org/apache/wayang/basic/operators/ObjectFileSerialization.java#L107-L122), binary payloads are deserialized directly via `ObjectInputStream.readObject()` without type filtering. ### Affected Files - [`ObjectFileSerialization.java`](file:///d:/Open-Source/wayang/wayang-commons/wayang-basic/src/main/java/org/apache/wayang/basic/operators/ObjectFileSerialization.java#L107-L122) - [`WayangValue.java`](file:///d:/Open-Source/wayang/wayang-platforms/wayang-flink/src/main/java/org/apache/wayang/flink/compiler/criterion/WayangValue.java#L112-L133) ### Expected Behavior - Configure an `ObjectInputFilter` on `ObjectInputStream` restricting deserialization to expected classes (e.g., standard collections and basic types) or default strictly to JSON-based serialization. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
