Class XStreamHolder

    • Constructor Detail

      • XStreamHolder

        public XStreamHolder()
      • XStreamHolder

        public XStreamHolder​(@NotNull
                             Set<String> additionalWhiteListClasses)
    • Method Detail

      • addClassesWhiteList

        public static void addClassesWhiteList​(@NotNull
                                               String[] classesWhiteList)
      • disableSecurityChecks

        public static void disableSecurityChecks()
      • getXStream

        public com.thoughtworks.xstream.XStream getXStream()
        Deprecated.
        Returns:
        XStream
      • getXStream

        public com.thoughtworks.xstream.XStream getXStream​(ClassLoader classLoader)
      • releaseXStream

        public void releaseXStream​(com.thoughtworks.xstream.XStream xstream)
      • configureXStream

        protected void configureXStream​(com.thoughtworks.xstream.XStream xStream)
      • getDeserializedByXStreamTypes

        public static Collection<String> getDeserializedByXStreamTypes()
      • setupDefaultSecurityOldWay

        public static void setupDefaultSecurityOldWay​(com.thoughtworks.xstream.XStream xstream)
        The latest XStream versions (1.4.18 and newer) requiress security allowlist to be populated. This method is used to restore old behavior — denylist.