Open vladak opened 9 months ago
I have seen this on Linux build as well.
Once the configuration is converted to some other serialization scheme, preferably one that does not allow code injection (#2329), this test can be removed, however my feeling is that this will take some time.
The
ConfigurationTest.testDeserializationOfNotWhiteListedClassThrowsError
test sometimes fails on Windows, specifically with the 2 parameter:Looks like the class loader actually allows the configuration to pass and the
Configuration
deserialization then fails withIOException
.