{
  "id": "java_serialized_base64",
  "name": "Java serialized object (Base64)",
  "status": "draft",
  "doc": "Java object serialization stream encoded in Base64. Every stream starts with the magic number 0xACED and the version 5, so its Base64 form starts with rO0AB. Such values in cookies, parameters or files can lead to insecure deserialization.",
  "categories": [
    {
      "id": "software",
      "name": "Software development"
    }
  ],
  "langs": [
    {
      "id": "common",
      "name": "Common to most languages"
    }
  ],
  "is_pii": false,
  "regexp": "^rO0AB[A-Za-z0-9+/]*={0,2}$",
  "examples": [
    {
      "value": "rO0A",
      "valid": false,
      "description": "Shorter than the stream header"
    }
  ],
  "links": [
    {
      "type": "doc",
      "url": "https://docs.oracle.com/en/java/javase/21/docs/specs/serialization/protocol.html"
    }
  ],
  "type": "datatype",
  "translations": {}
}