Company
Date Published
Author
Brian Vermeer
Word count
1262
Language
English
Hacker News points
None

Summary

''````````````````````````````````` The new Java 17 features aim to improve security and serialization in Java applications. Records provide a safer deserialization mechanism, but it's still vulnerable to gadgets. Deserialization filters were introduced in Java 9, but their usage was limited until Java 17. The new features include Context-Specific Deserialization Filters, which allow for more flexible and customizable filtering. Java Flight Recorder improvements also help detect deserialization exploits by monitoring events related to object streams. Upgrading to Java 17 is recommended to take advantage of these security enhancements.