Class SubTypeValidator
- java.lang.Object
-
- org.codehaus.jackson.map.jsontype.impl.SubTypeValidator
-
public class SubTypeValidator extends Object
Helper class used to encapsulate rules that determine subtypes that are invalid to use, even with default typing, mostly due to security concerns. Used byBeanDeserializerFactory- Since:
- 1.9.14
-
-
Field Summary
Fields Modifier and Type Field Description protected Set<String>_cfgIllegalClassNamesSet of class names of types that are never to be deserialized.protected static Set<String>DEFAULT_NO_DESER_CLASS_NAMESSet of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.protected static StringPREFIX_STRING
-
Constructor Summary
Constructors Modifier Constructor Description protectedSubTypeValidator()
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description static SubTypeValidatorinstance()voidvalidateSubType(JavaType type)
-
-
-
Field Detail
-
PREFIX_STRING
protected static final String PREFIX_STRING
- See Also:
- Constant Field Values
-
DEFAULT_NO_DESER_CLASS_NAMES
protected static final Set<String> DEFAULT_NO_DESER_CLASS_NAMES
Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.
-
-
Method Detail
-
instance
public static SubTypeValidator instance()
-
validateSubType
public void validateSubType(JavaType type) throws JsonMappingException
- Throws:
JsonMappingException
-
-