fix: ForbiddenClassException java.time.Period

(cherry picked from commit f30f49c)
1c-syntax · Jun 21, 2021 · 8bd8d46 · 8bd8d46
1 parent 1b8dbb7
commit 8bd8d46
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/java/com/github/_1c_syntax/mdclasses/unmarshal/XStreamFactory.java b/src/main/java/com/github/_1c_syntax/mdclasses/unmarshal/XStreamFactory.java
@@ -92,6 +92,7 @@
 import com.thoughtworks.xstream.converters.reflection.ReflectionConverter;
 import com.thoughtworks.xstream.io.HierarchicalStreamReader;
 import com.thoughtworks.xstream.io.xml.QNameMap;
+import com.thoughtworks.xstream.security.ExplicitTypePermission;
 import com.thoughtworks.xstream.security.NoTypePermission;
 import com.thoughtworks.xstream.security.WildcardTypePermission;
 import lombok.Getter;
@@ -191,6 +192,7 @@ protected void setupConverters() {
  XStream.setupDefaultSecurity(xStream);
  xStream.addPermission(NoTypePermission.NONE);
  xStream.addPermission(new WildcardTypePermission(new String[]{"com.github._1c_syntax.**"}));
+ xStream.addPermission(new ExplicitTypePermission(new String[]{"java.time.Period"}));
 
  // необходимо зарегистрировать все классы, имена которых в XML отличаются от имен самих классов
  registerClasses(xStream);