[jboss-jira] [JBoss JIRA] (DROOLS-1764) Add method to create a thrusted and unthrusted XStream instance on XStreamUtils

[Geoffrey De Smet (JIRA)]

    [ https://issues.jboss.org/browse/DROOLS-1764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13477550#comment-13477550 ] 

Geoffrey De Smet commented on DROOLS-1764:
------------------------------------------

Submitted a PR on droolsjbpm-knowledge
  https://github.com/kiegroup/droolsjbpm-knowledge/pull/270

> Add method to create a thrusted and unthrusted XStream instance on XStreamUtils
> -------------------------------------------------------------------------------
>
>                 Key: DROOLS-1764
>                 URL: https://issues.jboss.org/browse/DROOLS-1764
>             Project: Drools
>          Issue Type: Enhancement
>          Components: core engine
>            Reporter: Geoffrey De Smet
>            Assignee: Geoffrey De Smet
>            Priority: Critical
>
> Each piece of code will need to figure out wether to use the thrusting or unthrusting xstream.
> - thrusted: the xml is just like java code. It's basically executable.
> - unthrusted: only whitelisted, select packages are allowed. There is no blacklist approach. Root packages are not being whitelisted.
> Furthermore, *we want unthursted to allow all XStreamAliassed annotations automatically*, so it works like JAXB and Jackson.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)