Insecure deserialization in Java endpoint

Code reviewHard30 min

Your task

Review this Java endpoint that accepts a serialized 'preferences' blob.