Apache
/
activemq
mirror of https://github.com/apache/activemq.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[AMQ-8348] Fix XmlMessageRenderer has the risk of XStream deserialization 

(cherry picked from commit 099108239c)
This commit is contained in:
xingrufei 2021-08-05 15:50:28 +08:00 committed by Jean-Baptiste Onofré
parent ec23ab93dd
commit 0b28d92280
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
activemq-web/src/main/java/org/apache/activemq/web/view/XmlMessageRenderer.java
View File

@ -42,6 +42,7 @@ public class XmlMessageRenderer extends SimpleMessageRenderer {
public XStream getXstream() { public XStream getXstream() {
if (xstream == null) { if (xstream == null) {
xstream = new XStream(); xstream = new XStream();
XStream.setupDefaultSecurity(xstream);
} }
return xstream; return xstream;
} }