http://mail-archives.apache.org/mod_mbox/commons-dev/201511....
https://www.owasp.org/index.php/Information_leak_through_ser...