pojo-class-in-java

The POJO Class in Java: A Security Guide to Plain Objects

A POJO class in Java looks harmless — just fields and getters — but the moment it becomes a deserialization target it turns into an attack surface. Here is how plain objects go wrong and how to keep them safe.