[GEODE-10515] Enhance Session Attribute Handling with Input Validation#7941

Closed

JinwooHwang wants to merge 5 commits intoapache:developfrom

JinwooHwang:GEODE-unsafe-deserialization-fix

Commits on Oct 21, 2025

Fix critical unsafe deserialization vulnerability in GemfireHttpSession
JinwooHwang
committed

Commits on Oct 24, 2025

Merge branch 'apache:develop' into GEODE-unsafe-deserialization-fix
JinwooHwang
authored
Update assembly_content.txt to include new security-related javadoc files
JinwooHwang
committed

Commits on Nov 10, 2025

Split allowlist into ALLOWED_CLASSES (exact, O(1)) and ALLOWED_PATTERNS (regex, O(n))
JinwooHwang
committed

Commits on Dec 5, 2025

Add comprehensive test coverage for deserialization security
JinwooHwang
committed