title: How to resolve Deserialization of untrusted data checkmarx scan issue
body: <p>I have an checkmarx high defect to resolve deserialization of untrusted data.</p>
  <p>Here is my code</p>
  <pre><code>File file = new File(path);
  FileInputStream fin = new FileInputStream(file):
  ObjectInputStream ois = new ObjectInputStream(fin);
  Object result = ois.readObject();
  ois.close();
  </code></pre>