Home / Companies / Snyk / Blog / Post Details
Content Deep Dive

New Java 17 features for improved security and serialization

Blog post from Snyk

Post Details
Company
Date Published
Author
Brian Vermeer
Word Count
1,262
Language
English
Hacker News Points
-
Summary

''````````````````````````````````` The new Java 17 features aim to improve security and serialization in Java applications. Records provide a safer deserialization mechanism, but it's still vulnerable to gadgets. Deserialization filters were introduced in Java 9, but their usage was limited until Java 17. The new features include Context-Specific Deserialization Filters, which allow for more flexible and customizable filtering. Java Flight Recorder improvements also help detect deserialization exploits by monitoring events related to object streams. Upgrading to Java 17 is recommended to take advantage of these security enhancements.