      def _extend_marshalling(options)
        @marshalling = !(options[:marshalling] === false) # HACK - TODO delegate to Factory
        extend Marshalling if @marshalling
      end
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.