Skip to content

Restrict element types in more collections on deserialization #26917

@daniel-beck

Description

@daniel-beck

What feature do you want to see added?

SECURITY-3707 restricts the types of elements in DescribableList specifically, but there are other collection types that allow deserializing types not matching the collection types.

As a stability improvement (failing early), implement similar protection in PersistedList and CopyOnWriteList.

Upstream changes

No response

Are you interested in contributing this feature?

No response

Metadata

Metadata

Assignees

Labels

No labels
No labels
No fields configured for Enhancement.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions