Recipe catalogJavaSecurityMarshallingOn this pageMarshalling Recipes Insecure JMS deserialization Secure the use of Jackson default typing Secure the use of SnakeYAML's constructor