=== on 25 Sep 2014, 09:19:10 Ann Campbell wrote: \[~nicolas.peru] FB divides this into two rules: one for ``++Serializable++`` outer classes and one for non-serializable outer classes. I really debated one rule or two because the problems caused are different in magnitude, but since the title and the recommendation are the same for both I combined. Let me know if you'd like me to split. === on 25 Sep 2014, 11:55:59 Nicolas Peru wrote: \[~ann.campbell.2] Detection of the issue is the same : (non static inner class) the mitigation is different depending on the ``++Serializability++`` of the outer class. Since one case will result in a runtime error (critical) and the other one in a (major) recommandation I tend to think they should be split with different severity (but implementation will probably be shared).