Deserialization of untrusted data

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...