import java.io.ObjectInputStream;
import java.net.Socket;

public class DeserializeUntrusted {
    public Object handle(Socket client) throws Exception {
        ObjectInputStream in = new ObjectInputStream(client.getInputStream());
        return in.readObject();
    }
}