????
org.apache.commons.io.serialization.ValidatingObjectInputStream

???
??
This package provides a framework for controlling the deserialization of classes.