Class AliasedNetRipeTypePermission

  • All Implemented Interfaces:
    com.thoughtworks.xstream.security.TypePermission

    public class AliasedNetRipeTypePermission
    extends Object
    implements com.thoughtworks.xstream.security.TypePermission
    XStream TypePermission that accepts all types that have been aliased that are from net.ripe. Prevents types for which a default alias exists, that are not on the allow-list, and not from net.ripe. to be de-serialised. Further limits the amount of classes that are available to be used as gadgets.
    • Constructor Detail

      • AliasedNetRipeTypePermission

        public AliasedNetRipeTypePermission​(com.thoughtworks.xstream.XStream xStream)
    • Method Detail

      • allows

        public boolean allows​(Class type)
        Allow types that have an alias by checking whether their serialized name differs from their fully qualified name.
        Specified by:
        allows in interface com.thoughtworks.xstream.security.TypePermission
        Parameters:
        type - type to check
        Returns:
        whether an alias has been applied to the type