Tag: J2EE Bad Practices: Non-serializable Object Stored in Session

Description The application stores a non-serializable object as an HttpSession attribute, which can hurt reliability. A J2EE application can make use of multiple JVMs in...