Hi Alvaro,

Alvaro Muñoz wrote:

> Hi Joe,
> 
> 
> i also agree that having to write custom converters for all your classes
> defeats XStream purpose, but its neccesary in order to register a catch
> all converter. I understand reflection converters cannot be disabled by
> default since most of XStream based applications use them, but there
> should be a way to unregister a converter so creating custom converters
> wouldnt be necessary,

The correct way to "unregister" a converter is to register a new one with 
same or higher priority, see also XSTR-160.

> As for Spring wrapper, I totally agree that if used for writing web
> services (=untrusted input), reflection converters should be out of the
> game by default.

As said earlier, I know nothing about Spring's XStream integration.

Chers,
Jörg


---------------------------------------------------------------------
To unsubscribe from this list, please visit:

    http://xircles.codehaus.org/manage_email


Reply via email to