Allow Jackson Databind with allowlist functionality, version <= 2.9.10.4-redhat-00001, to log deserialization attempts. This would help those moving to a Jackson Databind release with the allowlist functionality to build a list of classes to be used for the allowlist.
More information at https://docs.google.com/document/d/1Q8ua6BUCf4gSW-Tad2srlrDA9py4uJhb8TwV9lwFQIk/edit#heading=h.l9wqsegwojzt
- mentioned on