[#XSTR-284] XStream bypasses type safety

XStream

XStream bypasses type safety

Created: 16/Mar/06 05:56 PM Updated: 07/Aug/06 09:12 PM

Component/s:

None

Affects Version/s:

None

Fix Version/s:

1.2

Description

« Hide

XStream does not ensure, that the object returned by a converter is of the appropriate type. It happily sets the field to any object returned by a converter, regardless of the field's type. Reported by Joe Wolf: http://thread.gmane.org/gmane.comp.java.xstream.user/1577

All

Comments

Change History

Sort Order:

Ascending order - Click to sort in descending order

[ Permlink | « Hide ]

Joerg Schaible - 16/Mar/06 06:11 PM

Joe Wolf, can you test this? The latest version in the repository will detect now such a situation and throw a ConversionException.