Reports classes which may be deserialized. A class may be deserialized if it supports the Serializable interface, and its readObject() method is not defined to immediately throw an error. Deserializable classes may be dangerous in code intended for secure use.

Use the checkbox below to ignore classes extending Throwable directly or indirectly.