Security framework of XStream not initialized, XStream is probably vulnerable

后端 未结 3 761
耶瑟儿~
耶瑟儿~ 2021-01-03 18:30

Security framework of XStream not initialized, XStream is probably vulnerable

I keep getting this console error in red while using XStream (1.4.10)

3条回答
  •  猫巷女王i
    2021-01-03 19:10

    It also works by specifying an all-inclusive pattern for allowed classes:

    xstream.allowTypesByRegExp(new String[] { ".*" });
    

提交回复
热议问题