Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[fix] Removing out of the box option for Java serde in functions #22832

Merged
merged 1 commit into from
Jun 4, 2024

Conversation

merlimat
Copy link
Contributor

@merlimat merlimat commented Jun 3, 2024

Motivation

Removing serde for functions (in alternative to Pulsar schema) that is based on Java object serialization, since it can potentially open up for deserialization security issues.

Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

  • Dependencies (add or upgrade a dependency)
  • The public API
  • The schema
  • The default values of configurations
  • The threading model
  • The binary protocol
  • The REST endpoints
  • The admin CLI options
  • The metrics
  • Anything that affects deployment

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

Matching PR in forked repository

PR in forked repository:

@merlimat merlimat added this to the 3.4.0 milestone Jun 3, 2024
@merlimat merlimat requested a review from nlu90 June 3, 2024 23:03
@merlimat merlimat self-assigned this Jun 3, 2024
@github-actions github-actions bot added the doc-not-needed Your PR changes do not impact docs label Jun 3, 2024
@merlimat merlimat merged commit b091081 into apache:master Jun 4, 2024
53 of 55 checks passed
@merlimat merlimat deleted the java-serde branch June 4, 2024 00:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/security doc-not-needed Your PR changes do not impact docs ready-to-test
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants