Invalid values of the command line and the security properties of `jdk.serialFilter `and `jdk.serialFilterFactory` are reported by throwing `java.lang.IllegalStateException` on the first use.
The property values are checked when constructing `java.io.ObjectInputStream` or when calling the methods of `java.io.ObjectInputFilter.Config` including `getSerialFilter()` and `getSerialFilterFactory()`.
The `IllegalStateException` indicates that the serial filter or serial filter factory is invalid and cannot be used; deserialization is disabled.
Previously, the exception thrown was `ExceptionInInitializerError`.