Class SubTypeValidator
- java.lang.Object
-
- org.codehaus.jackson.map.jsontype.impl.SubTypeValidator
-
public class SubTypeValidator extends Object
Helper class used to encapsulate rules that determine subtypes that are invalid to use, even with default typing, mostly due to security concerns. Used byBeanDeserializerFactory
- Since:
- 1.9.14
-
-
Field Summary
Fields Modifier and Type Field Description protected Set<String>
_cfgIllegalClassNames
Set of class names of types that are never to be deserialized.protected static Set<String>
DEFAULT_NO_DESER_CLASS_NAMES
Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.protected static String
PREFIX_STRING
-
Constructor Summary
Constructors Modifier Constructor Description protected
SubTypeValidator()
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description static SubTypeValidator
instance()
void
validateSubType(JavaType type)
-
-
-
Field Detail
-
PREFIX_STRING
protected static final String PREFIX_STRING
- See Also:
- Constant Field Values
-
DEFAULT_NO_DESER_CLASS_NAMES
protected static final Set<String> DEFAULT_NO_DESER_CLASS_NAMES
Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.
-
-
Method Detail
-
instance
public static SubTypeValidator instance()
-
validateSubType
public void validateSubType(JavaType type) throws JsonMappingException
- Throws:
JsonMappingException
-
-