io.netty.handler.codec.serialization (Netty API Reference (4.1.109.Final))

Interface Summary
Interface Description

ClassResolver Deprecated
This class has been deprecated with no replacement, because serialization can be a security liability

Interface Summary
Interface	Description
ClassResolver	Deprecated This class has been deprecated with no replacement, because serialization can be a security liability

Class Summary
Class	Description
ClassResolvers	Deprecated This class has been deprecated with no replacement, because serialization can be a security liability
CompatibleObjectEncoder	Deprecated This class has been deprecated with no replacement, because serialization can be a security liability
ObjectDecoder	Deprecated This class has been deprecated with no replacement, because serialization can be a security liability
ObjectDecoderInputStream	Deprecated This class has been deprecated with no replacement, because serialization can be a security liability
ObjectEncoder	Deprecated This class has been deprecated with no replacement, because serialization can be a security liability
ObjectEncoderOutputStream	Deprecated This class has been deprecated with no replacement, because serialization can be a security liability

Package io.netty.handler.codec.serialization Description

Encoder, decoder and their compatibility stream implementations which transform a Serializable object into a byte buffer and vice versa.

Security: serialization can be a security liability, and should not be used without defining a list of classes that are allowed to be desirialized. Such a list can be specified with the jdk.serialFilter system property, for instance. See the serialization filtering article for more information.