Reports classes which may be serialized or deserialized. A class may be serialized if it supports the Serializable interface, and its readObject() and writeObject() methods are not defined to always throw an exception. Serializable classes may be dangerous in code intended for secure use.

Use the first checkbox below to ignore classes extending Throwable directly or indirectly. However it may be more secure to add readObject() and writeObject() methods which always throw an exception instead.

New in 2017.3