The special constructor used for serialization should also perform thorough input validation and should be either protected or private to help protect against misuse by malicious code.

• 用于序列化的特殊构造函数也应当进行彻底的输入验证,并且应当成为被保护的或者私有的,以帮助防范恶意代码的滥用行为。