Class SubTypeValidator

java.lang.Object

tools.jackson.databind.jsontype.impl.SubTypeValidator

public class SubTypeValidator
extends Object

Helper class used to encapsulate rules that determine subtypes that are invalid to use, even with default typing, mostly due to security concerns. Used by BeanDeserializerFactory

Since:

2.8.11

Field Summary

Fields

Modifier and Type	Field	Description
protected Set<String>	_cfgIllegalClassNames	Set of class names of types that are never to be deserialized.
protected static final Set<String>	DEFAULT_NO_DESER_CLASS_NAMES	Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.
private static final SubTypeValidator	instance
protected static final String	PREFIX_C3P0
protected static final String	PREFIX_SPRING

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	SubTypeValidator()

Method Summary

Modifier and Type	Method	Description
static SubTypeValidator	instance()
void	validateSubType(DeserializationContext ctxt, JavaType type, BeanDescription.Supplier beanDescRef)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

PREFIX_SPRING

protected static final String PREFIX_SPRING

See Also:

• Constant Field Values

PREFIX_C3P0

protected static final String PREFIX_C3P0

See Also:

• Constant Field Values

DEFAULT_NO_DESER_CLASS_NAMES

protected static final Set<String> DEFAULT_NO_DESER_CLASS_NAMES

Set of well-known "nasty classes", deserialization of which is considered dangerous and should (and is) prevented by default.

_cfgIllegalClassNames

protected Set<String> _cfgIllegalClassNames

Set of class names of types that are never to be deserialized.

instance

private static final SubTypeValidator instance

Constructor Details

SubTypeValidator

protected SubTypeValidator()

Method Details

instance

public static SubTypeValidator instance()

validateSubType

public void validateSubType(DeserializationContext ctxt,
 JavaType type,
 BeanDescription.Supplier beanDescRef)