Jasper Yu
says to
YSITD
沒有一個正常unserialization可以觸發RCE