Class SubTypeValidator

java.lang.Object
org.codehaus.jackson.map.jsontype.impl.SubTypeValidator

public class SubTypeValidator extends Object
Helper class used to encapsulate rules that determine subtypes that are invalid to use, even with default typing, mostly due to security concerns. Used by BeanDeserializerFactory
Since:
1.9.14
  • Field Details

    • PREFIX_STRING

      protected static final String PREFIX_STRING
      See Also:
    • DEFAULT_NO_DESER_CLASS_NAMES

      protected static final Set<String> DEFAULT_NO_DESER_CLASS_NAMES
      Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.
    • _cfgIllegalClassNames

      protected Set<String> _cfgIllegalClassNames
      Set of class names of types that are never to be deserialized.
  • Constructor Details

    • SubTypeValidator

      protected SubTypeValidator()
  • Method Details