Class SubTypeValidator
java.lang.Object
org.codehaus.jackson.map.jsontype.impl.SubTypeValidator
Helper class used to encapsulate rules that determine subtypes that
are invalid to use, even with default typing, mostly due to security
concerns.
Used by
BeanDeserializerFactory
- Since:
- 1.9.14
-
Field Summary
FieldsModifier and TypeFieldDescriptionSet of class names of types that are never to be deserialized.Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.protected static final String
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionstatic SubTypeValidator
instance()
void
validateSubType
(JavaType type)
-
Field Details
-
PREFIX_STRING
- See Also:
-
DEFAULT_NO_DESER_CLASS_NAMES
Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default. -
_cfgIllegalClassNames
Set of class names of types that are never to be deserialized.
-
-
Constructor Details
-
SubTypeValidator
protected SubTypeValidator()
-
-
Method Details
-
instance
-
validateSubType
- Throws:
JsonMappingException
-