diff --git a/java/ql/src/Likely Bugs/Serialization/MissingVoidConstructorsOnSerializable.qhelp b/java/ql/src/Likely Bugs/Serialization/MissingVoidConstructorsOnSerializable.qhelp index b4de17c88763..24805d9a23a6 100644 --- a/java/ql/src/Likely Bugs/Serialization/MissingVoidConstructorsOnSerializable.qhelp +++ b/java/ql/src/Likely Bugs/Serialization/MissingVoidConstructorsOnSerializable.qhelp @@ -23,7 +23,9 @@ is not the case. The error will be detected at runtime.
Make sure that every non-serializable class that is extended by a serializable class has a no-argument constructor.
+Make sure that every non-serializable class that is extended by a serializable class has a no-argument constructor.
+Alternatively, consider defining a writeReplace method that replaces the Serializable class instance with
+a serialization proxy, so as to avoid direct deserialization of a class whose parent lacks a no-argument constructor.