|
|
|
|
|
by kevingadd
311 days ago
|
|
Calling a property getter can have side effects, so if you serialize an object with a getter you have to be very cautious to make sure nothing weird happens underneath you during serialization. People have exploited this sort of side effect to get bug bounties before via type confusion attacks, iirc. |
|