Spring/spring-framework
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added reference to CatchAllConverter

Browse Source 
Added reference to CatchAllConverter in both javadoc and reference docs.

Issue: SPR-10821
This commit is contained in:
Arjen Poutsma
2013-08-12 12:26:34 +02:00
parent 96f5314df6
commit c00782a3e8
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
spring-oxm/src/main/java/org/springframework/oxm/xstream/XStreamMarshaller.java
View File

@@ -80,8 +80,9 @@ import org.springframework.util.xml.StaxUtils;
* {@code XStreamMarshaller} to unmarshal XML from external sources</b> (i.e. the Web),
* as this can result in <b>security vulnerabilities</b>. If you do use the
* {@code XStreamMarshaller} to unmarshal external XML, set the
* {@link #setConverters(ConverterMatcher[]) converters} and
* {@link #setSupportedClasses(Class[]) supportedClasses} properties or override the
* {@link #setSupportedClasses(Class[]) supportedClasses} and
* {@link #setConverters(ConverterMatcher[]) converters} properties (possibly using a
* {@link CatchAllConverter} as the last converter in the list) or override the
* {@link #customizeXStream(XStream)} method to make sure it only accepts the classes
* you want it to support.
*