org.springframework.oxm.xstream

Class CatchAllConverter

java.lang.Object

org.springframework.oxm.xstream.CatchAllConverter

public class CatchAllConverter
extends java.lang.Object

XStream Converter that supports all classes but throws exceptions for (un)marshalling.

Main purpose of this class is to register this converter as a catch-all converter with a normal or higher priority, in addition to converters that explicitly support the domain classes that should be supported. As a result, default XStream converters with lower priorities and possible security vulnerabilities do not get invoked.

For instance:

 XStreamMarshaller unmarshaller = new XStreamMarshaller();
 unmarshaller.getXStream().registerConverter(new MyDomainClassConverter(), XStream.PRIORITY_VERY_HIGH);
 unmarshaller.getXStream().registerConverter(new CatchAllConverter(), XStream.PRIORITY_NORMAL);
 MyDomainClass o = unmarshaller.unmarshal(source);
 

Since:
4.0
Author:
Arjen Poutsma

Constructor Summary

Constructors

Constructor and Description
CatchAllConverter()

Method Summary

Modifier and Type	Method and Description
boolean	canConvert(java.lang.Class type)
void	marshal(java.lang.Object source, HierarchicalStreamWriter writer, MarshallingContext context)
java.lang.Object	unmarshal(HierarchicalStreamReader reader, UnmarshallingContext context)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CatchAllConverter

public CatchAllConverter()

Method Detail

canConvert

public boolean canConvert(java.lang.Class type)

marshal

public void marshal(java.lang.Object source,
                    HierarchicalStreamWriter writer,
                    MarshallingContext context)

unmarshal

public java.lang.Object unmarshal(HierarchicalStreamReader reader,
                                  UnmarshallingContext context)