I found that using the DynamicProxyConverter can be a security issue that
can lead to remote code execution.
I dont know if it is possible to unregister it as I can see no
unregisterConverters method in the XStream class but I would like to use
XStream SpringOXM wrapper for a RESTFul API, so I would like to unregister
it using the SpringOXM wrapper, is it possible?



Reply via email to