Class AnyAnnotationTypePermission

  • All Implemented Interfaces:
    com.thoughtworks.xstream.security.TypePermission

    public class AnyAnnotationTypePermission
    extends Object
    implements com.thoughtworks.xstream.security.TypePermission
    Permission for any type which is annotated with an XStream annotation. This presumes that because the class has an XStream annotation, it was designed with XStream in mind, and therefore it is not vulnerable. Jackson and JAXB follow this philosophy too.
    • Constructor Detail

      • AnyAnnotationTypePermission

        public AnyAnnotationTypePermission()
    • Method Detail

      • allows

        public boolean allows​(Class type)
        Specified by:
        allows in interface com.thoughtworks.xstream.security.TypePermission