pgjdbc / pgadba

Implementation of Java 10 sql2 spec for PostgreSQL
BSD 2-Clause "Simplified" License
70 stars 10 forks source link

How to implement AdbaType.JAVA_OBJECT #25

Open alexanderkjall opened 6 years ago

alexanderkjall commented 6 years ago

Lets talk about how to implement AdbaType.JAVA_OBJECT.

I raised the issue on the jdbc-spec discuss list, and my gut feeling is that this isn't possible to do without causing a deserialization security hole, but maybe i'm wrong.

@davecramer had some feedback, maybe we can discuss this more in detail here instead of on the list.