Changes are split into following categories:
- Major changes: The major new features that all users should know about.
- Minor changes: Any smaller changes, including bugfixes.
- Stream Compatibility: Changes affecting the persisted data.
- API changes: Any changes to the API that could impact existing users.
Full details can be found in GitHub's Issues,
filter for the appropriate milestone.
Upcoming
Not yet released.
Major changes
- Support for Record types (contributed by Julia Boes and Chris Hegarty, both of Oracle).
- Usage of Java generic types. Most code bases will still compile without change.
- Support for fail-safe deserialization unless the parser is not directly involved (I/O or syntax error) as
combination of new method getLevel() of HierarchicalStreamReader and GHPR:#91.
- GHI:#120: Add Automatic-Module-Name entry to XStream's manifests.
- Remove obsolete xstream-benchmark project and resulting artifacts.
Minor changes
- Switch Woodstox parser dependency from org.codehaus.woodstox:wstx-asl to
com.fasterxml.woodstox:woodstox-core.
- GHPR:#15, JIRA:XSTR-727, JIRA:XSTR-772: Make use of ConcurrentHashMap.
- GHI:#134: Possible reuse of instances for Byte, Character, Short, Integer and Long while unmarshalling.
- GHPR:#145: FileName parameter of StackTraceElement can be used for other source code units than file,
converter handles this.
- GHI:#4: Cannot add suppressed exception to unmarshalled Throwable.
- TraxSource supports the creation of an ObjectOutputStream to transform the output of XStream on-the-fly.
- StackTraceElementConverter keeps now information about the source code unit for native methods if
available.
- StackTraceElementConverter keeps for Java 9 or higher information about the class loader and module name
and its version.
- The file name of unmarshalled StackTraceElement instances is no longer set to Unknown Source or
Native Method.
- Optimized lookup for a defined implicit collection, array or map.
- No need for reflection in StackTraceElementFactory anymore since Java 5.
- StaxReader did not propagate close for Reader and InputStream.
- Add SimpleStaxDriver without namespace support as possible alternative to default driver.
- GHPR:#265: Make build reproducible.
- GHI:#72: Finally it is possible to use Jettison 1.4.1 or higher.
API changes
- Generification of the API.
- Remove any stuff deprecated in XStream 1.2.x.
- Remove obsolete benchmark project (included package c.t.x.tools.benchmark).
- Merge functionality of ExtendedHierarchicalStreamReader into HierarchicalStreamReader.
- Merge functionality of ExtendedHierarchicalStreamWriter into HierarchicalStreamWriter.
- HierarchicalStreamReader and HierarchicalStreamWriter extend AutoCloseable instead of Closeable now.
- Added c.t.x.io.xml.SimpleStaxDriver.
- Added c.t.x.io.HierarchicalStreamReader.getLevel().
- Added c.t.x.io.xml.SaxWriter#OOS_SUPPLIER_PROPERTY
- Added c.t.x.io.xml.SaxWriter#SOURCE_OBJECT_QUEUE_PROPERTY.
- Deprecated c.t.x.io.xml.SaxWriter#SOURCE_OBJECT_LIST_PROPERTY.
- Added c.t.x.io.xml.TraxSource#createObjectOutputStream
- Deprecated obsolete method c.t.x.XStream.setupDefaultSecurity.
- Added c.t.x.converters.extended.RecordConverter.
- Added c.t.x.converters.extended.ThrowableConverter.ThrowableConverter(Mapper, ConverterLookup).
- Deprecated c.t.x.converters.extended.ThrowableConverter.ThrowableConverter(ConverterLookup).
- Added c.t.x.core.util.Base64Codec.
- Added c.t.x.core.util.JVM.isUnnamedModule().
- Deprecated c.t.x.core.util.JVM.getBase64Codec().
Stream compatibility
- Drop automatic reference support at deserialization time for immutable types declared in the 1.4.x version
series (java.util.Currency, java.util.UUID, java.net.URI, java.nio.charset.Charset and the empty collection
types).
- ThrowableConverter uses by default now format of SerializableConverter, but can still read old format of
1.4.x version.
- No support for Hibernate 3 collections.
1.4.20
Released December 24, 2022.
This maintenance release addresses the security vulnerabilities
CVE-2022-40151 and CVE-2022-41966, causing a
Denial of Service by raising a stack overflow. It also provides new converters for Optional and Atomic types.
Major changes
- GHI:#308: Add converter for AtomicBoolean, AtomicInteger, AtomicLong, and AtomicReference of
package java.util.concurrent.atomic.
- GHI:#293: Add converter for Optional, OptionalDouble, OptionalInt, and OptionalLong of package
java.util.
Minor changes
- GHPR:#287: Close stream opened from provided URL.
- GHI:#284: Fix disabling check against hash code attack with XStream.setCollectionUpdateLimit(0).
Stream compatibility
- The atomic types with new converters of package java.util.concurrent.atomic, that have been written with
previous versions of XStream, can still be deserialized.
- The Optional types with new converters of package java.util, that have been written with previous versions
of XStream, can still be deserialized.
- The WildcardTypePermission allows by default no longer anonymous class types.
API changes
- Added c.t.x.converters.extended.AtomicBooleanConverter.
- Added c.t.x.converters.extended.AtomicIntegerConverter.
- Added c.t.x.converters.extended.AtomicLongConverter.
- Added c.t.x.converters.extended.AtomicReferenceConverter.
- Added c.t.x.converters.extended.OptionalConverter.
- Added c.t.x.converters.extended.OptionalDoubleConverter.
- Added c.t.x.converters.extended.OptionalIntConverter.
- Added c.t.x.converters.extended.OptionalLongConverter.
- Added c.t.x.security.WildcardTypePermission.WildcardTypePermission(boolean,String[]).
1.4.19
Released January 29, 2022.
This maintenance release addresses the security vulnerability
CVE-2021-43859, when unmarshalling highly recursive collections or maps causing a
Denial of Service.
API changes
- Added c.t.x.XStream.COLLECTION_UPDATE_LIMIT and c.t.x.XStream.COLLECTION_UPDATE_SECONDS.
- Added c.t.x.XStream.setCollectionUpdateLimit(int).
- Added c.t.x.core.SecurityUtils.
- Added c.t.x.security.AbstractSecurityException and c.t.x.security.InputManipulationException.
- c.t.x.security.InputManipulationException derives now from c.t.x.security.AbstractSecurityException.
1.4.18
Released August 22, 2021.
This maintenance release addresses following security vulnerabilities, when unmarshalling with
an XStream instance using the default blacklist of an uninitialized security framework. XStream is therefore now
using a whitelist by default.
Minor changes
- GHI:#233: Support serializable types with non-serializable parent with PureJavaReflectionConverter.
Stream compatibility
Starting with version 1.14.12 nine years ago, XStream contains a
Security Framework to implement a black- or whitelist for the allowed types
at deserialization time. Until version 1.4.17, XStream kept a default blacklist in order to deny all types of the
Java runtime, which are used for all kinds of security attacks, in order to
guarantee optimal runtime compatibility for existing users. However, this approach has failed. The last months
have shown, that the Java runtime alone contains dozens of types that can be used for an attack, not even looking
at the 3rd party libraries on a classpath. The new version of XStream uses therefore now by default a whitelist,
which is recommended since nine years. It also has been complaining on the console for a long time about an
uninitialized security framework the first time it was run. Anyone who has followed the advice and initialized the
security framework for their own scenario can easily update to the new version without any problem. Everyone else
will have to do a proper initialization now, otherwise the new version will fail with certainty at deserialization
time.
1.4.17
Released May 13, 2021.
This maintenance release addresses the security vulnerability
CVE-2021-29505, when unmarshalling with XStream instances using an uninitialized
security framework.
Stream compatibility
- The following types are now blacklisted by default and the deserialization
of XML containing one of the two types will fail. You will have to enable these types by explicit
configuration, if you need them:
- any type in the java.rmi.* and sun.rmi.* package hierarchies
- the individual type com.sun.jndi.toolkit.dir.LazySearchEnumerationImpl
1.4.16
Released March 13, 2021.
This maintenance release switches XStream's default parser and addresses following security
vulnerabilities, when unmarshalling with an XStream instances using an uninitialized security framework.
Major changes
- Switch from Xpp3 as default parser to MXParser, a fork of Xpp3.
Minor changes
- GHI:#238: Fix possibility to process references on enum types at deserialization.
- GHI:#237: Fix optimization in XmlFriendlyNameCoder.
Stream compatibility
- The following types are now blacklisted by default and the deserialization
of XML containing one of the two types will fail. You will have to enable these types by explicit
configuration, if you need them:
- the type hierarchies for java.io.InputStream, java.nio.channels.Channel,
javax.activation.DataSource and javax.sql.rowsel.BaseRowSet
- the individual types com.sun.corba.se.impl.activation.ServerTableEntry,
com.sun.tools.javac.processing.JavacProcessingEnvironment$NameProcessIterator,
sun.awt.datatransfer.DataTransferer$IndexOrderComparator, and sun.swing.SwingLazyValue
- the individual types com.sun.corba.se.impl.activation.ServerTableEntry,
com.sun.tools.javac.processing.JavacProcessingEnvironment$NameProcessIterator,
sun.awt.datatransfer.DataTransferer$IndexOrderComparator, and sun.swing.SwingLazyValue
- the internal type Accessor$GetterSetterReflection of JAXB, the internal types
MethodGetter$PrivilegedGetter and ServiceFinder$ServiceNameIterator of JAX-WS
- all inner classes of javafx.collections.ObservableList
- an internal ClassLoader used in a private copy of BCEL within the Java runtime
Dependencies
The default parser of XStream has changed from the Xpp3Parser in artifact xpp3:xpp3_min to MXParser, a fork of
Xpp3 in the artifact io.github.x-stream:mxparser. The Xpp3 is unmaintained for a long time, bugs have been fixed
reported more than a decade ago, improvements by other forks have been incorporated and some endless loops have
been fixed, that could have been utilized as DoS attack.
XStream has therefore new default dependencies. If you have used XStream with the default driver (i.e. Xpp3),
you can still exchange the XStream library for a drop-in replacement, but you will also have to remove the Xpp3 and
add the MXParser library instead.
For build time you will have to add the Xpp3 library to your dependencies, if you made explicitly use of the
Xpp3 driver. If you did explicitly use a different driver than Xpp3 and had therefore excluded the Xpp3
dependency, you might have to exclude now the new MXParser dependency instead to minimize your dependency list.
1.4.15
Released December 13, 2020.
This maintenance release addresses the security vulnerabilities
CVE-2020-26258 and CVE-2020-26259, when
unmarshalling with XStream instances using an uninitialized security framework.
Minor changes
- GHI:#226: XmlFriendlyNameCoder does not accept '9' as valid character in an XML name.
- GHPR:#228: DefaultMapper should handle IllegalArgumentException thrown by Class.forName().
Stream compatibility
- The type jdk.nashorn.internal.objects.NativeString and the internal JAX-WS type ReadAllStream.FileStream
are now part of the default blacklist and the deserialization of XML containing one of the two types will fail.
You will have to enable these types by explicit configuration, if you need them.
Delivery
Any XStream release can run with a minimal Java runtime environment of Java 1.4 as long as this environment will
process only requested classes of the jar file. Until version 1.4.14 XStream was delivered also as special Java 7
version for Android, because Dalvik scans all classes and fails at classes requiring a higher runtime version. However, this
special version will not work in a normal Java 8 environment or higher and was never meant do so.
Unfortunately, this version has to be build always after the standard version due to the build sequence. The
latest version in Maven Central however is always the one that has been deployed last independently from the time
of publishing. This creates an annoyance now in GitHub for any project using the Dependabot service which creates
automated pull requests with updates to the latest XStream version, because it injects now the special Java 7
version that probably breaks these projects.
Users who still require a special version for Java 7 will have to build this artifact now on their own. Users
for even older Java environments had always to do so anyway.
1.4.14
Released November 16, 2020.
This maintenance release addresses the security vulnerability
CVE-2020-26217, reported originally as CVE-2017-9805 for Struts' XStream Plugin,
an arbitrary execution of commands when unmarshalling with XStream instances using an uninitialized security
framework.
Stream compatibility
- The types java.lang.ProcessBuilder and javax.imageio.ImageIO$ContainsFilter are now part of the default
blacklist and the deserialization of XML containing one of the two types will fail. You will have to enable
these types by explicit configuration, if you need them.
1.4.13
Released September 6, 2020.
Major changes
- GHPR:#216, GHPR:#218: Defer reflective access to Java core modules.
- GHI:#207: New predefined blacklist avoids vulnerability due to improper setup of the security framework.
1.4.12
Released April 12, 2020.
Minor changes
- XmlFriendlyNameCoder supports now XML parsers implementing only 4th edition of XML 1.0 specification.
- Fix support of CDATA events in StAX.
- GHI:#171: XStream.createObjectInputStream does not pass the DataHolder.
- GHI:#151: Use of SPDX license identifier in POM and Manifest.
- GHI:#152: Declare OSGi import of internal runtime packages as optional.
- Drop Require-Capability entry in manifest.
<IP_ADDRESS>
Released October 27, 2018.
Hot fix
- GHI:#133: XStream 1.4.11 fails to run on a Java Runtime < 8.
1.4.11
Released October 23, 2018.
This maintenance release addresses again the security vulnerability
CVE-2013-7285, an arbitrary execution of commands when unmarshalling with XStream instances using an
uninitialized security framework. Only 1.4.10 uninitialized security framework was affected.
Minor changes
- GHPR:#91, GHPR:#106: Clean-up data stacks in UnmarshallingContext implementations in case of exception (by
Märt Bakhoff).
- GHI:#2: Unneeded contention in DefaultConverterLookup.
- GHI:#94: Fix PathConverter containing absolute Windows paths.
- GHI:#105: XStream's ObjectInputStream returns wrong values for readUnsignedByte and readUnsignedShort.
- JIRA:XSTR-616 and GHPR:#93: Introduce StringCodec interface to support arbitrary Base64 codec
implementations for EncodedByteArrayConverter. Prefer Base64 codec implementations of the Java runtime over
XStream's own one.
- GHI:#97: Support to run out of the box in a Java 1.4 runtime is established again.
- Provide methods in AbstractCollectionConverter that read and write in a balanced way from and to the
hierarchical stream.
- New future-proof method JVM.isVersion to detect major version of Java runtime (incl. Java 10) as
replacement for individual JVM.isXY methods.
- GHI:#115: Dom4JDriver ignores character set of Dom4J configuration creating a Writer.
- GHI:#116: Make converters null safe.
- GHI:#123 and GHPR:#124: Declare XPP dependencies for OSGi as optional.
- Add XppDriver.createDefaultParser for a simpler access to the default XmlPullParserFactory.
- Old BEA reference implementation of StAX is outdated, unmaintained and has security issues, therefore
XStream's driver has been deprecated.
- Support for JaCoCo: FieldDictionary ignores synthetic fields starting with $jacoco as name.
- Add integration test for OSGi (by Wes Wannemacher).
Stream compatibility
- The EncodedByteArrayConverter will now use an encoder by default that does no longer add line breaks as
normally required by the RFC 1521 after 76 characters, making it also easier to use the converter for
attributes. This will not affect XStream's Base64 decoder.
API changes
- Added c.t.x.converters.collection.AbstractCollectionConverter.readBareItem(HierarchicalStreamReader, UnmarshallingContext, Object).
- Added c.t.x.converters.collection.AbstractCollectionConverter.readCompleteItem(HierarchicalStreamReader, UnarshallingContext, Object).
- Deprecated c.t.x.converters.collection.AbstractCollectionConverter.readItem(HierarchicalStreamReader, UnmarshallingContext, Object).
- Added c.t.x.converters.collection.AbstractCollectionConverter.writeBareItem(Object, MarshallingContext, HierarchicalStreamWriter).
- Added c.t.x.converters.collection.AbstractCollectionConverter.writeCompleteItem(Object, MarshallingContext, HierarchicalStreamWriter).
- Deprecated c.t.x.converters.collection.AbstractCollectionConverter.writeItem(Object, MarshallingContext, HierarchicalStreamWriter).
- Added c.t.x.converters.collection.AbstractCollectionConverter.writeNullItem(MarshallingContext, HierarchicalStreamWriter).
- Added c.t.x.converters.extended.EncodedByteArrayConverter(StingCodec).
- Added c.t.x.converters.extended.NamedCollectionConverter.readBareItem(HierarchicalStreamReader, UnmarshallingContext, Object).
- Deprecated c.t.x.converters.extended.NamedCollectionConverter.readItem(HierarchicalStreamReader, UnmarshallingContext, Object).
- Added c.t.x.converters.extended.NamedCollectionConverter.writeCompleteItem(Object, MarshallingContext, HierarchicalStreamWriter).
- Deprecated c.t.x.converters.extended.NamedCollectionConverter.writeItem(Object, MarshallingContext, HierarchicalStreamWriter).
- Added c.t.x.core.DefaultConverterLookup(Map).
- Added c.t.x.core.util.JVM.getBase64Codec().
- Added c.t.x.core.util.JVM.isVersion().
- Deprecated c.t.x.core.util.JVM.is18().
- Deprecated c.t.x.core.util.JVM.is9().
- Deprecated c.t.x.io.ExtendedHierarchicalStreamReader.
- Deprecated c.t.x.io.ExtendedHierarchicalStreamWriter.
- Deprecated c.t.x.io.ExtendedHierarchicalStreamWriterHelper.
- Deprecated c.t.x.io.xml.BEAStaxDriver.
- Added c.t.x.io.xml.Dom4JReader.Dom4JReader(Branch).
- Added c.t.x.io.xml.XppDriver.createDefaultParser().
- Added c.t.x.core.util.StingCodec.
1.4.10
Released May 23, 2017.
This maintenance release addresses also the security vulnerability
CVE-2017-7957, used for a Denial of Service attack by crashing the Java runtime.
Major changes
- GHI:#84: New XStream artifact with -java7 appended as version suffix for a library explicitly
without the Java 8 stuff (lambda expression support, converters for java.time.* package).
- Fix PrimitiveTypePermission to reject type void to prevent CVE-2017-7957 with an initialized
security framework.
- Improve performance by minimizing call stack of mapper chain.
- GHPR:#82, JIRA:XSTR-774: Add converters for types of java.time, java.time.chrono, and java.time.temporal
packages (converters for LocalDate, LocalDateTime, LocalTime, OffsetDateTime, and ZonedDateTime by Matej Cimbora).
- GHI:#29: JavaBeanConverter does not respect ignored unknown elements.
- Add XStream.setupDefaultSecurity to initialize security framework with defaults of XStream 1.5.x.
- Emit error warning if security framework has not been initialized and the XStream instance is vulnerable to
known exploits.
Stream Compatibility
- The alias duration for type javax.xml.datatype.Duration has changed to xml-duration
due to the support of the classes in the java.time package. duration is now used for type java.time.Duration.
Simply register the alias duration again for type javax.xml.datatype.Duration if backward
compatibility is required for this type.
- All types of the java.time packages that have been written with previous versions of XStream can still be
deserialized.
Minor changes
- GHI:#54: Fix BeanProvider.canInstantiate(Class), method may not throw exception.
- GHI:#76 and GHPR:#77: Missing support for cascaded writeReplace calls.
- GHI:#61: Regression in 1.4.9: Performance drop in ImplicitCollectionMapper.
- GHI:#52: PathConverter fails for file paths with spaces.
- PathConverter uses always forward slashes as path separator.
- GHI:#53: SqlTimestampConverter cannot parse values without fraction.
- GHI:#45: Support different time zones for SqlTimestampConverter.
- GHI:#67 and GHPR:#68: Allow usage of DataHolder for createObjectInputStream and createObjectOutputStream.
- GHI:#75: Use java.time.* package instead of Joda-Time.
- Dom4JXmlWriter does not flush writer at endDocument().
- Path is an immutable type.
- GHPR:#65: Protect converter lookup against runtime errors.
- Current Java 9 implementation reports itself as version 9 now.
API changes
- Added c.t.x.util.JVM.is9().
- Added c.t.x.XStream.setupDefaultSecurity(XStream).
- Added c.t.x.XStream.createObjectInputStream(HierarchicalStreamReader, DataHolder) and
c.t.x.XStream.createObjectOutputStream(HierarchicalStreamWriter, String, DataHolder).
- Added c.t.x.converters.javabean.PropertyDictionary.propertyDescriptorOrNull(Class, String).
- Added method c.t.x.mapper.Mapper.IsIgnoredElement(String)
- Added c.t.x.mapper.ElementIgnoringMapper.
- Deprecated method c.t.x.mapper.FieldAliasingMapper.addFieldsToIgnore(Pattern).
- Deprecated method c.t.x.mapper.FieldAliasingMapper.omitField(Class, String).
- Deprecated method c.t.x.core.util.JVM.is17().
- Deprecated method c.t.x.core.util.JVM.is19().
1.4.9
Released March 15, 2016.
This maintenance release addresses also the security vulnerability
CVE-2016-3674, known as XXE vulnerability that can be used to expose arbitrary data from the file system
when unmarshalling.
Major changes
- GHI:#25: Fix XXE
vulnerability (CVE-2016-3674): Fixed affected drivers were Dom4JDriver, DomDriver, JDomDriver, JDom2Driver,
SjsxpDriver, StandardStaxDriver and WstxDriver. Still vulnerable are BEAStaxDriver and XomDriver. Processing of
(external) entities has been disabled. See FAQ for more information.
- Benchmark module has been deprecated in favor of
JMH (Java Microbenchmarking Harness).
- GHI:#33 and GHPR:#38: Add converter for java.nio.file.Path (by Aaron Jonson).
Minor changes
- GHI:#35: AnnotationMapper dropped silently constructor arguments for converters if they were equal.
- Fix: Possible concurrency problem with XomDriver.
- JIRA:XSTR-773, GHPR:#3: Minimize memory footprint by not keeping internal references to instances of
immutable types.
- Drop automatic reference support at deserialization time for immutable types before version 1.4 (primitive
types and their boxed counterpart, java.lang.Class, java.lang.String, java.math.BigDecimal, java.math.BigInteger,
java.io.File, java.net.URL, and java.awt.font.TextAttribute).
- Fix: Implicit collection declaration is erroneously inherited or propagated to hidden field of same name.
- XStreamConverter annotation supports null values as arguments for converter instantiation.
- GHI:#5: Support null values for JavaBean properties.
- GHI:#36: Fix NamedMapConverter, does not use SingleValueConverter of value if value is text of entry element.
- GHI:#13: Own converter for javax.activation.ActivationDataFlavor, because ExternalizableConverter cannot
handle a type that violates the Java specification.
- GHPR:#18: Minimize synchronized block in FieldDictionary.
- JIRA:XSTR-769: Synthetic fields with references to outer class use compiler dependent names.
- JIRA:XSTR-771: UUID is an immutable type by default.
- GHPR:#23: Constructor of AbstractXppDriver swallows causing exception.
- GHI:#28: Fix functionality of ClassAliaslingMapper.itemTypeAsAttributes(Class).
- GHI:#37: Historical Java 1.3 support suppresses causing exception of a thrown InvocationTargetException.
- GHI:#41: Cannot instantiate ToAttributedValueConverter with null value for valueFieldName using
XStreamConverter annotation.
- Fix example code in description of security framework.
- Clean-up usage of exceptions.
API changes
- Added c.t.x.XStream.addImmutableType(Class, boolean) and deprecated c.t.x.XStream.addImmutableType(Class).
- Added c.t.x.mapper.Mapper.isReferenceable(Class).
- Added c.t.x.mapper.ImmutableTypesMapper.addImmutableType(Class, boolean) and deprecated
c.t.x.mapper.ImmutableTypesMapper.addImmutableType(Class).
- Added c.t.x.io.xml.Dom4JDriver.createReader().
- Added c.t.x.io.xml.DomDriver.createDocumentBuilderFactory().
- Added c.t.x.io.xml.JDomDriver.createBuilder().
- Added c.t.x.io.xml.JDom2Driver.createBuilder().
- Added c.t.x.io.xml.XomDriver.createBuilder().
- Added constructor c.t.x.converter.extended.ToAttributedValueConverter.ToAttributedValueConverter(Class,
Mapper, ReflectionProvider, ConverterLookup).
- Added abstract c.t.x.converter.ErrorWritingException as common base for c.t.x.converter.ConversionException
and c.t.x.converter.reflection.ObjectAccessException.
- Deprecated c.t.x.io.xml.XomDriver(Builder), c.t.x.io.xml.XomDriver(Builder, NameCoder) and
c.t.x.io.xml.XomDriver.getBuilder().
- Deprecated c.t.x.mapper.ClassAliaslingMapper.itemTypeAsAttributes(Class) and
c.t.x.mapper.ClassAliaslingMapper.aliasIsAttribute(String). Methods never called, left-over from old refactoring.
1.4.8
Released February 18, 2015.
Major changes
- Support for serializable lambda expressions and handling of non-serializable ones.
Minor changes
- Detect Java 9 runtime.
- JIRA:XSTR-767: Deserialization of referenced lambda expressions fail.
- JIRA:XSTR-762: Private method readResolve() called on base classes.
- JIRA:XSTR-761: Support ignored serialPersistentField at deserialization time.
- JIRA:XSTR-755: ExternalizableConverter does not respect writeReplace and readResolve.
- JIRA:XSTR-757: Deserialized TreeSet does not honor remove(Object) return value contract.
- JIRA:XSTR-759: Support deserialization of W3C datetime
format in DateConverter with Java 7 runtime.
- Fix: DateConverter ignores provided locale.
- JIRA:XSTR-768: ISO8601GregorianCalendarConverter may set invalid time zone for Joda-Time.
- Fix: WeakCache.entrySet().iterator().next.setValue(value) returns the reference instead of the old value.
- Fix: SqlTimestampConverter throws IllegalArgumentException instead of ConversionException on fromString().
- Fix: CGLIBEnhancedConverter does not initialize transient members of parent after deserialization.
- JIRA:XSTR-763: Set scope of org.json:json to test instead declaring the dependency as optional.
API changes
- Added c.t.x.util.JVM.is19().
- Added c.t.x.converter.reflection.LambdaConverter and c.t.x.mapper.LambdaMapper.
- Declare c.t.x.XStream.ignoreUnknownElements(Pattern) as public.
- c.t.x.converters.reflection.AbstractReflectionConverter.readResolve() is protected now.
- c.t.x.mapper.AbstractAttributeAliasingMapper.readResolve() is protected now.
- Deprecated c.t.x.converters.extended.StackTraceElementFactory, it is an internal helper class.
- Deprecated c.t.x.converters.reflection.SerializationMethodInvoker, it is an internal helper class.
- Deprecated c.t.x.io.AttributeNameIterator, it is an internal helper class.
- Deprecated c.t.x.XStream.useXStream11XmlFriendlyMapper(), corresponding
c.t.x.mapper.XStream11XmlFriendlyMapper has been deprecated long ago.
- Deprecated c.t.x.converter.basic.BooleanConverter.shouldConvert(Class,Object), undetected remainder of
ancient XStream version.
1.4.7
Released February 8, 2014.
This maintenance release addresses mainly the security vulnerability
CVE-2013-7285, an arbitrary execution of commands when unmarshalling.
Major changes
- Add security framework to limit handled types while unmarshalling.
- java.bean.EventHandler no longer handled automatically because of severe security vulnerability.
- JIRA:XSTR-751: New SunLimitedUnsafeReflectionProvider that uses undocumented features only to allocate new
instances as required on Dalvik.
- Fix instantiation of AnnotationMapper that requires ConverterLookup and ConverterRegistry to be the same
instance.
Minor changes
- XSTR-749: NPE if ReflectionConverter.canConvert(type) is called with null as argument.
- XSTR-753: NPE if SerializationConverter.canConvert(type) is called with an interface type as argument that
extends Serializable.
- Add constructor to ReflectionConverter taking an additional type to create an instance that is dedicated to a
specific type only.
- The ConverterLookup used by default cannot be casted to a ConverterRegistry anymore.
API changes
- Added package c.t.x.security with interface TypePermission, all its implementations and
ForbiddenClassException.
- Added c.t.x.mapper.SecurityMapper handling the new type permissions.
- Added methods addPermission, denyPermission, allowTypesXXX and denyTypesXXX to c.t.x.XStream to setup
security at unmarshalling time.
- Added c.t.x.converters.reflection.SunLimitedUnsafeReflectionProvider.
- Deprecated c.t.x.converters.reflection.Sun14ReflectionProvider in favor of new
c.t.x.converters.reflection.SunUnsafeReflectionProvider.
- Added c.t.x.converters.reflection.ReflectionConverter(Mapper,ReflectionProvider,Class).
1.4.6
Released December 12, 2013.
Major changes
- JIRA:XSTR-566 and JIRA:XSTR-200: Better compatibility with GAE and environments with active SecurityManager
(i.e. in an Applet). XStream converters try now to ensure already in the canConvert methods that they can handle the
requested type in practice and not only theoretically. Additionally the implementations even better take care, that
the initialization of a converter will not break the setup of XStream itself. Following modifications have been done
for these topics:
- ReflectionConverter, SerializationConverter and LookAndFieldConverter will check if they can access the
fields by reflection for a requested type.
- SerializationConverter and ExternalizableConverter will check if they can create an instance of a derived
OutputObjectStream first.
- BeanProvider does no longer use reflection to locate default constructor.
- AbstractAttributedCharacterIteratorAttributeConverter (and therefore TextAttributeConverter) will check
first if it can access the possible constants of the type by reflection.
- NoClassDefFoundError raised in GAE accessing the fields of restricted types by reflection will be handled.
- StackTraceElementConverter uses constructor for StackTraceElement instances in Java 5 and GEA.
- JIRA:XSTR-739 and JIRA:XSTR-746: OrderRetainingMap fails if HashMap.putAll(Map) of Java Runtime is not
implemented calling put for every element within the map.
- New NamedArrayConverter to define names of inner elements.
Minor changes
- JIRA:XSTR-747: All constructors of StaxDriver derived classes take erroneously a XmlFriendlyNameCoder instead
of a plain NameCoder.
API changes
- Added c.t.x.converters.extended.NamedArrayConverter for free element names in arrays.
- Added constructors to c.t.x.io.xml.StandardStaxDriver taking NameCoder instead of XmlFriendlyNameCoder.
- Deprecated constructors of c.t.x.io.xml.StandardStaxDriver taking a XmlFriendlyNameCoder.
- Added constructors to c.t.x.io.xml.BEAStaxDriver taking NameCoder instead of XmlFriendlyNameCoder.
- Deprecated constructors of c.t.x.io.xml.BEAStaxDriver taking a XmlFriendlyNameCoder.
- Added constructors to c.t.x.io.xml.WstxDriver taking NameCoder instead of XmlFriendlyNameCoder.
- Deprecated constructors of c.t.x.io.xml.WstxDriver taking a XmlFriendlyNameCoder.
- Added method canAccess to c.t.x.converter.reflection.AbstractReflectionConverter.
- Added static method canCreateDerivedObjectOutputStream to c.t.x.core.JVM.
- Deprecated unused member c.t.x.converter.javabean.BeanProvider.NO_PARAMS.
- Deprecated unused method c.t.x.converter.javabean.BeanProvider.getDefaultConstrutor(Class).
1.4.5
Released September 18, 2013.
Major changes
- JIRA:XSTR-732: Use a referencing implementation for the ClassLoader to support environments where no new
ClassLoader can be instantiated due to security restrictions.
- JIRA:XSTR-691: Allow unknown XML elements to be ignored using new method XStream.ignoreUnknownElements.
- JIRA:XSTR-728: XStream creates invalid JSON with JsonHierarchicalStreamDriver for custom converters since
XStream 1.4.
- JIRA:XSTR-300: New EnumToStringConverter to support custom string representations of Enum values.
- JIRA:XSTR-292 and JIRA:XSTR-405: New NamedMapConverter and NamedCollectionConverter to define names of inner
elements.
- JIRA:XSTR-726: New annotation XStreamAliasType to support declarative definition of XStream.aliasType().
- JIRA:XSTR-735: Support for JDOM2 with JDom2Driver, JDom2Reader and JDom2Writer.
- Optimized XML structure for java.awt.Font.
- Fix: ToAttributedValueConverter silently appends fields without attribute support to the value producing
mixed-mode XML.
- JIRA:XSTR-566 and JIRA:XSTR-249: Better compatibility with Google AppEngine and J2ME, setup no longer fails
for unavailable converters.
Minor changes
- Fix missing manifest information.
- JIRA:XSTR-729: Add OSGi information to manifests.
- JIRA:XSTR-723: XStream will now detect a working enhanced mode dynamically instead using lists of known
vendors. This allows enhanced support for JamVM if it is bundled with OpenJDK. It will currently fail on a runtime
based on GNU Classpath (at least up to version 0.98).
- JIRA:XSTR-541: JavaScript compatibility problem with 64-bit integers in JSON.
- JIRA:XSTR-719: Support replacement of default converter in any case.
- JIRA:XSTR-725: processAnnotation performance improvement in concurrent situation.
- JIRA:XSTR-721: EnumConverter is more lenient while parsing constants.
- New constructors for CollectionConverter and MapConverter to allow registration for an individual type.
- JIRA:XSTR-724: Cache class name lookup failures.
- Current IBM JDK for Java 1.4.2 no longer has a reverse field ordering.
- LongConverter supports now positive hex and octal numbers over Long.MAX_VALUE within 64 bit.
- Fix: Sun14RefectionProvider ignores a provided FieldDictionary.
- JIRA:XSTR-457: Do not write 'defined-in' attribute if not needed.
- JettisonMappedXmlDriver provides better support to overwrite its create methods.
- JIRA:XSTR-685: StAX based drivers (StaxDriver and JettisonMappedXmlDriver) are not closing internal input
stream reading from file or URL.
- JIRA:XSTR-736: XStream.unmarshal may throw NPE if version info of manifest is missing.
- JIRA:XSTR-733: Implicit elements that match multiple defined implicit collections will be assigned to the map
with the nearest matching element type.
- JIRA:XSTR-740: ISO8601GregorianCalendarConverter creates Calendar instance with wrong Locale in Java 7 if the
Locale for the LocaleCategory.FORMAT is different to the global default Locale.
- JIRA:XSTR-578: Implement support for aliasing in JavaClasConverter, JavaFieldConverter and
JavaMethodConverter. While it is not possible to enable this in general, new constructors have been added to these
converters and an example in the acceptance tests (AliasTest).
- JIRA:XSTR-742: Register CompositeClassLoader in Java 7 as parallel capable.
- JIRA:XSTR-743: Support proxy collections of Hibernate Envers.
- Fix NPE in AttributeMapper.shouldLookForSingleValueConverter if parameters fieldName and definedIn are null.
- Implicit type argument can be omitted when registering converters with @XStreamConverter annotation.
API changes
- Added c.t.x.converters.extended.NamedCollectionConverter for free element names in collections.
- Added c.t.x.converters.extended.NamedMapConverter for free element names in maps.
- Added c.t.x.io.xml.StandardStaxDriver to use the StAX implementation delivered with the Java 6 runtime.
- Deprecated c.t.x.io.xml.SjsxpStaxDriver to select the internal StAX implementation of Oracle.
- Added static methods getStaxInputFactory and getStaxOutputFactory to c.t.x.core.JVM as returning the
implementations of javax.xml.stream.XMLInputFactory (resp. javax.xml.stream.XMLOutputFactory) delivered with the Java
Runtime since Java 6.
- Added c.t.x.core.ClassLoaderReference.
- Added constructors taking an additional Class argument for c.t.x.converters.collections.CollectionConverter
and c.t.x.converters.collections.MapConverter.
- Added constructors taking a ClassLoaderReference instead of a ClassLoader and deprecated the ones taking the
ClassLoader:
- c.t.x.XStream
- c.t.x.converters.extended.DynamicProxyConverter
- c.t.x.converters.extended.JavaClassConverter
- c.t.x.converters.extended.JavaFieldConverter
- c.t.x.converters.extended.JavaMethodConverter
- c.t.x.converters.reflection.CGLIBEnhancedConverter
- c.t.x.converters.reflection.ExternalizableConverter
- c.t.x.converters.reflection.SerializableConverter
- c.t.x.mapper.AnnotationMapper
- c.t.x.mapper.DefaultMapper
- Added static methods newReflectionProvider, isAWTAvailable, isSQLAvailable and isSwingAvailable to
c.t.x.core.JVM as replacement for the deprecated non-static methods.
- Deprecated c.t.x.core.JVM() and all non-static methods.
- Added method useImplicitType to c.t.x.annotations.XStreamConverter.
- JIRA:XSTR-722: Added c.t.x.converters.reflection.ReflectionProvider.getFieldOrNull(Class, String).
- Deprecated c.t.x.converters.reflection.ReflectionProvider.fieldDefinedInClass(Class, String) in favor of new
c.t.x.converters.reflection.ReflectionProvider.getFieldOrNull(Class, String).
- Deprecated constructor c.t.x.converters.extended.RegexPatternConverter(Converter) in favor of
c.t.x.converters.extended.RegexPatternConverter().
- Deprecated default constructor of c.t.x.converters.extended.FontConverter in favor of
c.t.x.converters.extended.FontConverter(Mapper).
- Deprecated constructor c.t.x.converters.extended.ThrowableConverter(Converter) in favor of
c.t.x.converters.extended.ThrowableConverter(ConverterLookup).
- Deprecated class c.t.x.converters.reflection.SelfStreamingInstanceChecker and moved original implementation
into c.t.x.core.util, since it is internal.
- Deprecated interface c.t.x.mapper.AnnotationConfiguration.
1.4.4
Released January 19, 2013.
Minor changes
- JIRA:XSTR-709: Locks up on Mac with Apple JVM due to unwanted initialization of AWT.
- JIRA:XSTR-711: DateConverter cannot handle dates in different era.
- JIRA:XSTR-741: ToAttributedValueConverter fails to write enums as attributes.
- JIRA:XSTR-712: HibernateMapper throws NPE if a collection contains null.
- DateConverter supports now localized formats.
- JIRA:XSTR-710: JsonWriter does not write BigInteger and BigDecimal as number values.
- JIRA:XSTR-708: SqlTimestampConverter does not ignore timezone.
- JIRA:XSTR-707: Creation of XmllPullParser with the XmlPullParserFactory may fail in OSGi environment.
- JIRA:XSTR-705: Unnecessary synchronization accessing the field cache decreases performance.
- JIRA:XSTR-714: Fields not found when XStream12FieldKeySorter used.
API changes
- Deprecated method c.t.x.core.util.JVM.is14(), c.t.x.core.util.JVM.is15() and c.t.x.core.util.JVM.is16().
1.4.3
Released July 17, 2012.
Major changes
- Support java.util.concurrent.ConcurrentHashMap with the MapConverter. This will also avoid a bug in JRockit
JDK reported in JIRA:XSTR-608.
- JIRA:XSTR-699: Support for Hibernate 4 with XStream's Hibernate module as default for Java 6 or higher.
Minor changes
- JVM.loadClass will now also initialize the loaded class and ignore any occurring LinkageError.
- JIRA:XSTR-596: SubjectConverter will be no longer registered if initialization of javax.security.auth.Subject
fails.
- JIRA:XSTR-683: Inheritance of implicit collections, arrays or maps is dependent on declaration sequence.
- Inherited implicit collections, arrays or maps can be overwritten with own definition in subtype.
- JIRA:XSTR-688: Cannot omit XML elements from derived fields.
- JIRA:XSTR-696: Ill-formed JSON generated, because JSON writer is fed with type of declaring field instead of
the real object's type.
- JIRA:XSTR-685: Deserialization from file or URL keeps stream open.
- JIRA:XSTR-684: XML 1.0 character validation fails for characters from 0x10 to 0x1f.
- JavaBeanConverter supports now instantiation for a specific type and can therefore be used in
@XStreamConverter annotation.
- SerializableConverter is broken if the serialized type is the default implementation.
- Method marshalUnserializableParent of SerializableConverter is protected now to skip the default mechanism in
a derived converter that uses the default constructor to create the original type (as an alternative for
JIRA:XSTR-695).
- FieldDictionary may call sort of FieldKeySorter implementation with wrong type as key.
- Sometimes DependencyInjectionFactory tries to instantiate objects with mismatching constructor arguments.
- HSQLDB has to be a test dependency only for XStream's Hibernate module.
1.4.2
Released November 3, 2011.
Major changes
- XStream libraries can be used now directly in Android, therefore support of Java 1.4.2 has been stopped with
the delivery. Anyone who needs a version for Java 1.4.2 can build it easily from source, this build is still
supported and part of CI.
- JIRA:XSTR-675: New extended HierarchicalStreamReader interface with peekNextChild method. All XStream readers
implement the new interface (by Nikita Levyankov).
- JIRA:XSTR-673: Collections.EMPTY_LIST, Collections.EMPTY_SET and Collections.EMPTY_MAP supported with own
alias and defined as immutable.
- JIRA:XSTR-631: Collections.singletonList(), Collections.singletonSet() and Collections.singletonMap()
supported with own alias and own converters.
- JIRA:XSTR-406 + JIRA:XSTR-663: Support additional parameters for XStreamConverter annotation (e.g. to declare
a ToAttributedValueConverter).
Minor changes
- WstxDriver did not trigger Woodstox, but BEA StAX implementation.
- JIRA:XSTR-260: PrettyPrintWriter does not handle tab and new line characters in attributes.
- JIRA:XSTR-667: Cannot serialize empty list with JsonHierarchicalStreamDriver.
- JIRA:XSTR-661: TreeMarshaller.CircularReference is not a ConversionException.
- JIRA:XSTR-562: StAX: Namespace attribute is not written in non-repairing mode for second sibling.
- JIRA:XSTR-664: ClassCastException in HibernatePersistentSortedSetConverter and
HibernatePersistentSortedMapConverter.
- JIRA:XSTR-674: Recreate binary compatibility with 1.3.x series for method
CustomObjectInputStream.getInstance(...).
- JIRA:XSTR-671: CannotResolveClassException should accept cause.
- JIRA:XSTR-672: Collections.EMPTY_LIST, Collections.EMPTY_SET and Collections.EMPTY_MAP used for in implicit
collection should not throw ReferencedImplicitElementException.
- JIRA:XSTR-676: Introduce MissingFieldException thrown at deserialization time indicating a missing field or
property (by Nikita Levyankov).
- Add length limit for cached strings in StringConverter, 38 characters by default.
- The JsonHierarchicalStreamDriver and the JsonWriter did not support the inherited NameCoder instance.
- Add BinaryStreamDriver.
- NPE in XppDomComparator.
- Dom4JXmlWriter fails to flush the underlying writer.
- Known control characters are not encoded with JsonWriter as proposed at json.org.
- Detect duplicate property processing in JavaBeanConverter and throw DuplicatePropertyException instead of
clobbering silently.
- Allow access to Mapper and JavaBeanProvider in derived instances of JavaBeanConverter.
- DependencyInjectionFactory failed to create instance when a matching constructor was found, but a default
constructor was also present.
API changes
- Added interface c.t.x.io.ExtendedHierarchicalStreamReader extending c.t.x.io.HierarchicalStreamReader. All
implementations of c.t.x.io.HierarchicalStreamReader will implement also the extended interface.
- Added c.t.x.converters.reflection.MissingFieldException derived from
c.t.x.converters.reflection.ObjectAccessException and used instead when the unmarshalling process should write a
field or property that is missing and does not exist.
- Added methods c.t.x.io.path.PathTracker.peekElement(), c.t.x.io.path.PathTracker.peekElement(int), and
c.t.x.io.path.PathTracker.depth().
- Deprecated method c.t.x.core.ReferencingMarshallingContext.currentPath(). Wrong approach.
1.4.1
Released August 11, 2011.
Major changes
- JIRA:XSTR-659: Use again Xpp3 as default parser, now with additional XmlPullParser API as regular dependency
for the XPP factory. Only standard kXML2 package contains the XPP factory, but not the minimal kXML2 version.
Minor changes
- Add utility class c.t.x.io.xml.xppdom.XppFactory and a path tracking comparator for XppDom.
1.4
Released August 6, 2011.
Major changes
- Java 7 is detected and supported.
- JIRA:XSTR-542: The XppDriver uses now the official XmlPullParser API to locate an available parser using the
XmlPullParserFactory. This allows the usage of XPP technology with XStream in Android.
- Additional explicit XPP drivers for the Xpp3 and kXML2 implementations.
- Additional explicit XPP DOM drivers for the Xpp3 and kXML2 implementations.
- kXML2 is now the preferred parser implementation, Xpp3 is optional.
- Additional explicit StAX drivers for Woodstox, BEA StAX and SJSXP of the JDK 6 implementations.
- JDK 1.3 is no longer officially supported.
- JIRA:XSTR-377+JIRA:XSTR-226: New artifact xstream-hibernate with converters and mapper to process Hibernate
object graphs (by Costin Leau, Konstantin Pribluda and in special Jaime Metcher).
- New NameCoder interface and implementations to support a generic name translation between names from the
object graph and a target format. The new XmlFriendlyNameCoder replaces the XmlFriendlyReplacer used for XML only.
- JIRA:XSTR-553: Support annotations in Android.
- JIRA:XSTR-556: DateConverter uses format with 3-letter time zones that are ambiguous. Therefore it will now
always use UTC to write dates. Unmarshalled dates are not affected as long as they contain a time zone.
- The type java.lang.reflect.Field is now handled by an own converter, that can still read the old format.
- JIRA:XSTR-490: Provide path in Converter for contexts that track the path.
- JIRA:XSTR-592+JIRA:XSTR-579: OmitField respected at deserialization time even for existing fields.
- JIRA:XSTR-593: Direct support for java.net.URI instances (by Carlos Roman).
- JIRA:XSTR-615+JIRA:XSTR-580: Dynamic proxies cannot be referenced recursively.
- JIRA:XSTR-547: Wrong class loader used for Serializable types deserialized with an ObjectInputStream.
- JIRA:XSTR-341: Support of implicit arrays.
- JIRA:XSTR-306+JIRA:XSTR-406: Support of implicit maps.
- JIRA:XSTR-344: New ToAttributedValueConverter to allow conversion of an element with string body and
attributes.
- JIRA:XSTR-573: SortedSet added with TreeSet as the default implementation.
- JIRA:XSTR-576: TreeMap and TreeSet no longer add an element without comparator (by Jason Greanya), solves
also invalid format with JSON for such objects (JIRA:XSTR-640).
Minor changes
- JIRA:XSTR-612: Improve extensibility of c.t.x.javabean.* package by reintroducing a PropertyDictionary with
the additional interface PropertySorter.
- JIRA:XSTR-591: EnumSingleValueConverter did use toString() instead of name() to create the String
representation of an enum value.
- JIRA:XSTR-618: Add Oracle as vendor used for recent JRockit versions and former Sun JDK.
- JIRA:XSTR-656: DomReader and Dom4JReader do not escape attribute names retrieving their values.
- JIRA:XSTR-604: StringConverter's cache may cause an OutOfMemoryException.
- JIRA:XSTR-577: Skip UTF-8 BOM in XmlHeaderAwareReader.
- The XppReader no longer uses a BufferedReader.
- JIRA:XSTR-543: Better deserialization support of the defined-in system attribute in combination with field
aliases.
- JIRA:XSTR-551: Deprecated XStream.InitializationException still thrown instead of InitializationException.
- JIRA:XSTR-655: JsonWriter generates invalid JSON for Externalizable types.
- JIRA:XSTR-540: Support Jettison-based configuration of JettisonMappedXmlDriver (by Doug Daniels).
- JIRA:XSTR-633: JettisonMappedXmlDriver escaped property names according escape rules for XML tag names.
- JIRA:XSTR-625: Optionally ignore XStream's hints for Jettison to generate JSON arrays (by Dejan Bosanac).
- JIRA:XSTR-605: Upgrade to Jettison 1.2 (for Java 5 or higher).
- New JsonWriter.EXPLICIT_MODE generating JSON that enforces property sequence.
- JIRA:XSTR-552: Improve performance of ReflectionProvider (by Keith Kowalczykowski).
- JIRA:XSTR-559: Improve performance of Sun14ReflectionProvider (by Keith Kowalczykowski).
- JIRA:XSTR-564: Improve performance of AnnotationMapper (by Keith Kowalczykowski).
- JIRA:XSTR-563: Use ReferenceQueue for cleaning-up WeakReferences in ObjectIdDictionary (by Keith
Kowalczykowski).
- JIRA:XSTR-646: Cache of Sun14ReflectionProvider consumes more PermGen space than necessary.
- JIRA:XSTR-636: Ineffective cache in FieldDictionary using WeakHashMap with WeakReference values.
- Ineffective cache for SerializationMethodInvoker (related to JIRA:XSTR-636).
- Introduction of Caching interface implemented by all types in XStream that create local caches that may have
to be flushed manually.
- Avoid excessive creation of AbstractPullReader.Event objects by using a pool.
- Possibility to generate XPath expressions that select always a single node instead of a node list.
- Cannot reference replaced object using ID references.
- Implicit collection functionality will no longer use custom collection converters that may write tags that
are not recognized at deserialization time again.
- JIRA:XSTR-654: Unmarshal fails when an implicit collection is defined and an element is named equal to the
field.
- JIRA:XSTR-574: AbstractReferenceUnmarshaller cannot handle null values for references.
- Improve exception output in case of a missing field.
- JIRA:XSTR-555: StAX driver tests do not honor repairing mode.
- JIRA:XSTR-570: The @XStreamConverter provides now also the current type as possible constructor argument.
- JIRA:XSTR-629: Deserialization of Externalizable with non-accessible default constructor fails.
- JIRA:XSTR-571: Cannot serialize synchronized RandomAccessList types.
- JIRA:XSTR-583: BinaryDriver fails to handle Strings with more than 64K bytes.
- JIRA:XSTR-639: Cannot omit field at deserialization if the field has a class attribute.
- JIRA:XSTR-599: EncodedByteArrayConverter should implement SingleValueConverter.
- JIRA:XSTR-584: Race condition in XmlFriendlyReplacer.
- JIRA:XSTR-623: XmlFriendlyReplacer may write illegal name characters (by Michael Schnell).
- The ConversionException hides information if its ErrorWriter contains the added key already.
- JIRA:XSTR-598: Attribute "defined-in" was wrongly evaluated for other attributes.
- JIRA:XSTR-650: Possible NullPointerException at initialization on platforms like Android that do not support
all types of the JDK.
- JIRA:XSTR-652: Initialization of XStream fails if DurationConverter constructor throws a
javax.xml.datatype.DatatypeConfigurationException. Converter will no longer handle Duration types if no instance of
the internal DatatypeFactory can be created.
- Constructor DocumentWriter(Element) forgets the provided element.
- JIRA:XSTR-597: Optimize AbstractReflectionConverter.
- Introduce Caching interface to flush the internal cache of specific components.
- Support JIRA:XSTR-407 also for IBM JRE 1.6 and greater.
- java.nio.charset.Charset's converter was added as immutable type instead of the type itself.
- java.util.Currency added as immutable type.
- Fix selection of same parameter types in DependencyInjectionFactory.
- Deprecation of c.t.x.javabean.PropertyDictionary has been countermanded.
API changes
- Any deprecated stuff of the 1.2.x releases has been removed.
- Deprecated constructors of c.t.x.converters.reflection.SerializableConverter,
c.t.x.converters.reflection.ExternalizableConverter and c.t.x.converters.reflection.CGLIBEnhancedConverter; new
versions take an additional argument for class loader (as a result for JIRA:XSTR-547).
- Deprecated constructors of c.t.x.io.xml.XppReader, new versions take an additional argument for the
XmlPullParser.
- Deprecated c.t.x.io.xml.XppReader.createParser(), the XPP parser is now created by the driver.
- Package c.t.x.io.xml.xppdom is now part of the official API.
- c.t.x.io.xml.xppdom.Xpp3Dom and c.t.x.io.xmlxpp.dom.Xpp3DomBuilder have been deprecated. Functionality is
merged in c.t.x.io.xml.xppdom.XppDom.
- Deprecated c.t.x.mapper.XStream11XmlFriendlyMapper and c.t.x.mapper.AbstractXmlFriendlyMapper.
- Added interface c.t.x.core.ReferencingMarshallingContext which is implemented by all referencing marshallers.
- Added interface c.t.x.io.naming.NameCoder and implementations.
- Deprecated c.t.x.io.xml.XmlFriendlyReplacer, c.t.x.io.xml.XmlFriendlyReader and
c.t.x.io.xml.XmlFriendlyWriter.
- Deprecated c.t.x.io.xml.AbstractXmlDriver, c.t.x.io.xml.AbstractXmlReader and c.t.x.io.xml.AbstractXmlWriter,
added c.t.x.io.AbstractDriver, c.t.x.io.AbstractReader and c.t.x.io.AbstractWriter instead.
- Deprecated all constructors of Driver, Reader and Writer implementations that take a XmlFriendlyReplacer as
argument, added constructors taking a NameCoder instead.
- Added interface com.thoughtworks.xstream.converters.ErrorReporter to allow other types to report also errors
(apart from a HierarchicalStreamReader). Any converter and the parent object of the currently deserialized element
may provide additional error information now.
1.3.1
Released December 6, 2008.
CGLIB support must be explicitly activated now. The decision has been made due to possible
problems using an own classloader and because of ongoing complaints about occurring exceptions in the
CGLIBEnhancedConverter at XStream initialization although they are caused by incompatible ASM versions on the user's
classpath (JIRA:XSTR-469, JIRA:XSTR-513 and JIRA:XSTR-518).
XStream uses some attributes on its own. Until now it was possible to use
XStream.aliasAttribute to define a different name. This does still work but is deprecated for system attributes. Use
the new call XStream.aliasSystemAttribute for such an alias.
Major changes
- JIRA:XSTR-515: CGLIB support is no longer activated automatically and has to be explicitly turned on.
- JIRA:XSTR-448: Separated system attributes and user defined attributes for aliases.
- JIRA:XSTR-55: Ability to alias a package name.
- JIRA:XSTR-434: New JsonWriter instead of JsonHierarchicalStreamWriter with mode to strip root node of
generated JSON (by Paul Hammant).
- Support for Diablo JDK on FreeBSD (by Reto Bachmann-Gmür).
- JIRA:XSTR-495: New PersistenceStrategy instead of StreamStrategy (based on the code and comments by Alexander
Radzin).
Minor changes
- Support special Jettison functionality for JSON to detect collections or arrays with one element introduced
with Jettison 1.0.
- JIRA:XSTR-493: Using attributes for fields with XML-unfriendly names results in NPE at deserialization.
- JIRA:XSTR-497: Unsafe operation with WeakHashMap can raise a NPE in Sun14ReflectionProvider.
- JIRA:XSTR-423: Support of CGLIB enhanced proxies with multiple callbacks if the proxy uses a factory (CGLIB
default).
- JIRA:XSTR-536: XStream silently ignores unknown elements.
- JIRA:XSTR-503: Omitted properties in JavaBeans are requested at serialization (by Kevin Conaway).
- Fix possible memory leak in ObjectIdMap for JVMs that provide real distinct identity hash codes (happened on
amd64 system).
- JIRA:XSTR-480: Aliasing of array types.
- JIRA:XSTR-515: The SubjectConverter and DurationConverter are only registered if the converted class is part
of the JDK, otherwise they must be registered now explicitly.
- JIRA:XSTR-504: XmlHeaderAwareReader fails with improper sized PushbackInputStream.
- JIRA:XSTR-489: @XStreamConverter supports now also SingleValueConverter implementations.
- JIRA:XSTR-481: @XStreamConverter and @XStreamAsAttribute can be used together (as a result of JIRA:XSTR-489).
- JIRA:XSTR-519: New annotation @XStreamInclude to force annotation detection of included types (by Seven
Sparling).
- JIRA:XSTR-469: Support custom converters for enum types.
- JIRA:XSTR-502: ClassNotFoundException even if writeReplace returns proper object.
- JIRA:XSTR-529: NullPointerException for null elements in implicit lists.
- JIRA:XSTR-517: Miscellaneous performance improvements (by Tatu Saloranta).
- JIRA:XSTR-525: JsonHierarchicalStreamDriver writes invalid JSON in case of system attribute.
- JIRA:XSTR-535: Mode to allow plain values as result for JSON without root node.
- JIRA:XSTR-531: Possibility to omit system attributes.
- JIRA:XSTR-508: Fix marshalling error for nested serializable objects with own writeReplace/readResolve
methods.
- JIRA:XSTR-507: Advanced ReferenceByIdMarshaller uses id of the current object if available.
- JIRA:XSTR-485: Check reference for valid object when deserializing.
- Fix classloader problem, Xpp3 parser cannot be loaded within a web application.
- Dependencies have been updated to latest versions of JDOM, Jettison, Joda Time, and Woodstox. Note for Maven
builds that the groupId of JDOM has changed.
- Fix possible IndexOutOfBoundsException creating returning the message for a ConversionException.
- JIRA:XSTR-495: StreamStrategy cannot handle key with value null.
API changes
- Deprecated c.t.x.io.json.JsonHierarchicalStreamWriter in favour of c.t.x.io.json.JsonWriter.
- c.t.x.mapper.EnumMapper no longer derives from the c.t.x.mapper.AttributeMapper as it has been before version
1.3. Therefore the new constructor has been deprecated in favour of the old one.
- c.t.x.mapper.Mapper.getConverterFromAttribute(Class, String) has been deprecated in favour of
c.t.x.mapper.Mapper.getConverterFromAttribute(Class, String, Class) taking the type as third argument that should be
handled by the converter.
- c.t.x.core.ReferenceByIdMarshaller.IdGenerator.next() has now the current object as argument.
- New c.t.x.persistence.PersistenceStrategy and c.t.x.persistence.FilePersistenceStrategy.
- Deprecated c.t.x.persistence.StreamStrategy and c.t.x.persistence.FileStreamStrategy.
1.3
Released February 27, 2008.
Major changes
- ReflectionConverter writes now the fields of the parent classes first.
- Support for Converter definition at field level.
- Refactoring of Annotation support, invent auto-detection mode.
- Annotated converters are no longer detected automatically, all annotations are now handled in the same way.
- JIRA:XSTR-334: XStream will deserialize directly from a file or URL. Some parser take advantage of these
objects to define a SystemId used to resolve further references in XML, schema or DTD. Appropriate createReader
methods have been added to c.t.x.io.HierarchicalStreamDriver.
- JIRA:XSTR-261: All c.t.x.io.HierarchicalStreamDriver implementations respect now the encoding of an XML
header if read from an InputStream.
- DomDriver does no longer use explicitly UTF-8 by default, DomReader will therefore respect the encoding
defined in the XML header or use native encoding
- JIRA:XSTR-415: JavaBeanConverter uses now BeanIntrospection (by Hinse ter Schuur).
- JIRA:XSTR-424: DateConverter uses now by default SimpleDateFormat instances in non-lenient mode.
- JIRA:XSTR-386: SingleValueConverter that utilizes PropertyEditor implementations (by Jukka Lindström).
- JIRA:XSTR-427: Converter for javax.xml.datatype.Duration (by John Kristian).
- JIRA:XSTR-305: Field alias inheritance (by David Blevins).
- XStream failed to initialize in environments without AWT or SQL classes.
- JIRA:XSTR-420: XPath of references are not XmlFriendly encoded.
- JIRA:XSTR-473: String "\0" serialized as invalid XML, support compliant behaviour according XML
version.
- JIRA:XSTR-431: Direct support of enhanced mode for SAP JVM (thanks to Norbert Kuck by SAP).
- JIRA:XSTR-437: Static cache in annotation processing causes failing OSGi bundles.
- JIRA:XSTR-279+JIRA:XSTR-335: Annotations are not inherited from parent class.
- Fix StringConverter using a WeakHashMap with strong references in its value.
- JIRA:XSTR-403: Attributes are no longer written with JSONHierarchicalStreamDriver if current object is a
collection.
- JIRA:XSTR-456: New LookAndFeelConverter handling LookAndFeel implementations with reflection.
- JIRA:XSTR-462: CachingMapper keeps direct class references.
- JIRA:XSTR-411: JsonHierarchicalStreamDriver does not escape characters according RFC 4627.
- JsonHierarchicalStreamDriver writes wrong brackets around complex Java types with a single value.
- JsonHierarchicalStreamDriver writes attribute names with a leading '@'.
- JsonHierarchicalStreamDriver supports Map implementations.
Minor changes
- Added converter for java.lang.StringBuilder instances.
- Added converter for java.util.UUID instances.
- JIRA:XSTR-430: Fields written as attributes could not be omitted.
- JIRA:XSTR-407: Comparator might access uninitialized elements for TreeSet and TreeMap. A deserialized
Comparator is no longer called, the converters expect the elements now in a sorted order.
- JIRA:XSTR-404, @XStreamImplicit() for ArrayList<ArrayList<Type>> throws ClassCastException.
- @XStreamContainedType() for ArrayList<ArrayList<Type>> throws ClassCastException.
- XStreamer did not persist a FieldKeySorter instance.
- JIRA:XSTR-241: JavaBeanConverter now supports customized BeanProvider.
- JIRA:XSTR-280: JavaBeanConverter now supports aliasField and omitField (by Hinse ter Schuur).
- JIRA:XSTR-280: SerializationConverter now supports aliasField and omitField.
- JIRA:XSTR-429: XmlFriendlyReplacer support for SaxWriter and TraxSource (by Adrian Wilkens).
- JIRA:XSTR-421: Characters cannot be written as attribute.
- JIRA:XSTR-426: java.swt.KeyStroke not properly serialized because of a character undefined in unicode.
- JIRA:XSTR-352: Strings with arbitrary ISO control characters are not properly serialized.
- JIRA:XSTR-428: An attribute named like a transient field did abort deserialization of following fields.
- JIRA:XSTR-443: XStream.createObjectOutputStream does not use the given driver to create the
HierarchicalStreamWriter.
- JIRA:XSTR-440: Implicit collections can be declared for fields that are not of Collection type.
- JIRA:XSTR-446: Handle all primitives and their boxed counterpart for JsonHierarchicalStreamDriver.
- JIRA:XSTR-447: Fix deserialization of Array class types in JDK 6 (see JDK bug 6500212).
- JIRA:XSTR-450: @XStreamAlias is ignored if attributes should be used for the field type.
- JIRA:XSTR-418: Inherited @XStreamAlias is ignored if field should be rendered as attribute.
- JIRA:XSTR-393: Annotation processing is not consistent.
- JIRA:XSTR-412: @XStreamImplicit throws NPE for untyped collections.
- JIRA:XSTR-463: Cannot provide own default Mapper chain.
- JIRA:XSTR-464: Cannot provide a ClassLoader that is used in all cases.
- JIRA:XSTR-394: Allow enums as attributes.
- JIRA:XSTR-413: Support @XStreamAsAttribute for enums.
- JIRA:XSTR-478: Cannot specify default implementation for polymorphic enum.
- JIRA:XSTR-419: Treat enums as immutable types.
- Update annotation tutorial, explain limitations of auto-detection mode.
- Added copyright notices to all files.
- StaxWriter.flush did close Stax' XMLStreamWriter instead of flushing it.
- JIRA:XSTR-471: XStream POMs do no longer declare a repository at all.
- Calendar object could not be rendered with JSONHierarchicalStreamDriver.
- JIRA:XSTR-476: Properties can be sorted by key.
- XStream.createObjectInputStream and XStream.createObjectOutputStream overloaded to support a binary
InputStream or OutputStream.
- JIRA:XSTR-470: Allow transient fields to be optionally deserialized.
API changes
- c.t.x.annotation.Annotations, c.t.x.annotation.AnnotationReflectionConverter and
c.t.x.annotation.AnnotationProvider deprecated. Functionality is integrated in new c.t.x.mapper.AnnotationMapper and
accessible with new methods c.t.x.XStream.processAnnotations().
- New auto-detection mode for annotations, that can be turned on with c.t.x.XStream.autodetectAnnotations()
- c.t.x.annotation.@XStreamContainedType deprecated, the behaviour is now always active and the annotation
therefore superfluous.
- Due to JIRA:XSTR-421 null characters are no longer written as tag with an attribute (<char
null="true"/>), but as empty tag. The old representation is still supported at deserialization.
- Characters that are not defined in unicode or ISO control characters (expect TAB and LF) are written as
numerical entity now.
- XPath references are now also XML-friendly encoded to match the path exactly. Unencoded references will
normally work anyway, but in special cases the exact behaviour of XStream 1.2.x might be necessary. See acceptance
tests for XStream 1.2.x compatibility.
- c.t.x.core.BaseException deprecated in favour of c.t.x.XStreamException as base exception for all exceptions
XStream throws.
- c.t.x.XStream.InitializerException deprecated in favour of c.t.x.InitializerException.
- New methods get() and keys() in interface c.t.x.converter.ErrorWriter.
- c.t.x.mapper.XmlFriendlyMapper deprecated, technology is replaced since version 1.2 by
c.t.x.io.xml.XmlFriendlyReplacer as part of the different XmlWriter implementations.
- c.t.x.mapper.Mapper.aliasForAttribute() and c.t.x.mapper.Mapper.attributeForAlias() deprecated, since it
provided in reality the combined functionality of c.t.x.mapper.Mapper.serializedMember()/realMember() and
c.t.x.mapper.Mapper.getConverterFromItemType().
- c.t.x.XStream(ReflectionProvider, Mapper, HierarchicalStreamDriver) deprecated, in favour of
c.t.x.XStream(ReflectionProvider, HierarchicalStreamDriver, Mapper, ClassLoader).
- New interface c.t.x.converter.ConverterRegistry to express explicit functionality managing the converters.
- c.t.x.core.DefaultConverterLookup no longer uses a c.t.x.mapper.Mapper. Therefore the old constructor has
been deprecated in favour of a default constructor.
- Overloaded methods of c.t.x.mapper.Mapper.getConverterFromItemType and
c.t.x.mapper.Mapper.getConverterFromAttribute have been deprecated. Only one version has been kept, the
implementation can handle all cases now at once and therefore multiple calls to the mapper chain are avoided.
- c.t.x.mapper.EnumMapper derives now from the c.t.x.mapper.AttributeMapper to support enums as attributes.
Therefore the old constructor has been deprecated in favour of one taking an additional
c.t.x.converters.ConverterLookup that has to be passed to the new parent.
Note, to support a representation of null values in some way, it is absolutely necessary that
each converter can handle a null value in its marshalling methods. If you have implemented your own custom converters,
try to handle such a case also to prevent incompatibilities in case XStream will provide such values with its next
major version.
Version 1.2.2
Released May 24, 2007.
Note, that next version of XStream will behave slightly different by default. XStream emits
all fields in declaration order like Java serialization. But in contrast to Java it will omit the fields of parent
classes last while Java serialization emits them first. This makes it difficult to match a given XML schema that
defined inherited types or leads sometimes to obscure initialization problems. However, XStream itself will not be
affected by the changed order of elements in the XML, any deserialization of current XML representations will work
fine. Anyway we will provide with XStream 1.3 a FieldKeySorter implementation that mimics the old behaviour. In the
meanwhile you can enforce the new field sorting by installing the NaturalFieldKeySorter.
Major changes
- JIRA:XSTR-391, Support for writing (and reading) JSON by the new JettisonMappedXmlDriver (by Dejan Bosanac).
- New FieldKeySorter interface allows a custom sort order of the XML elements.
- JIRA:XSTR-68 and JIRA:XSTR-210, OmitField is now respected at deserialization to ignore removed fields.
Minor changes
- JIRA:XSTR-387, Fix aliasing of inherited fields.
- JIRA:XSTR-395, Fix StringConverter allocating PermGen space.
- JIRA:XSTR-368, @XStreamConverter converters should be cached inside the AnnotationReflectionConverter.
- JIRA:XSTR-392, @XStreamOmitField can be used to omit fields from the resulting XML (contributed by Chung-Onn
Cheong).
- JIRA:XSTR-371, Fix JSONWriter that omits a closing bracket for for fields with null value.
- JIRA:XSTR-398, DomDriver ignores given XmlFriendlyReplacer.
- JIRA:XSTR-370, Buildable with JDK 6, fix FontConverter for JDK 6.
- JIRA:XSTR-382, Support hex and octal number values.
- DateConverter did not respect change in TimeZone after first usage.
- JIRA:XSTR-375, Support for aliasing native types.
- JIRA:XSTR-243 again, XML elements for transient fields are now ignored completely at deserialization.
- Release unused object references to keep memory print low.
- Support for AWT and SQL is now optional: XStream now works on embedded virtual machines lacking such APIs (by
Nicolas Gros d'Aillon).
- Support raw bytes read from the ObjectInputStream.
- JIRA:XSTR-373, Support for Hitachi JVM (tested by Yuji Yamano).
- JIRA:XSTR-378 and JIRA:XSTR-379, Fix TextAttributeConverter and EnumSetConverter failing on Apache Harmony.
- JIRA:XSTR-363, Support of native field order i.e. fields are processed in declaration order base classes
first.
- JIRA:XSTR-320, Static field in child may hide non-static field in parent.
API changes
- JIRA:XSTR-365, Multiple implicit collections with annotations. Deprecated @XStreamImclicitCollection in
favour of @XStreamImplicit declared at field level.
Version 1.2.1
Released November 11, 2006.
Major changes
- Introduced DocumentWriter interface and generalized functionality for all writer implementations creating a
DOM structure (DOM4J, DOM, JDom, Xom, Xpp3Dom).
- Refactored build system to use Maven 2. Ant still supported on XStream Core.
- Created separate XStream Benchmark module
Minor changes
- JIRA:XSTR-346, XStream.getClassMapper() does not return a ClassMapper for the current Mapper.
- Fix problem with fields containing a double underscore.
- JIRA:XSTR-345, Dom4JWriter adds up attributes.
- JIRA:XSTR-336, XStream fails to reference an implicit element.
- JIRA:XSTR-337, Annotation cycle bug.
- Fix packaging error for the resulting jar building with Maven2.
- JIRA:XSTR-339, NPE for attribute null values.
- JIRA:XSTR-338, NPE in JSON writer for converters using non-extended HierarchicalStreamWriter.
- JIRA:XSTR-357, Fix escaping of values in JSON writer.
- JIRA:XSTR-356, Fix unmarshaling error for fields containing proxies.
- JIRA:XSTR-349, Fix backward compatibility of Dom4jWriter.
- JIRA:XSTR-309, More versatile boolean conversion options (contributed by David Blevins).
- Add XStream.getReflectionProvider() to retrieve ReflectionProvider in use.
- JIRA:XSTR-358, @XStreamConverter annotation does not call converter constructor.
- Website generated using XSite
API changes
- Deprecate JDomWriter.getResult() in favour of DocumentWriter.getTopLevelNodes().
- Deprecate ThreadSafeSimpleDateFormat, since this is an internal helper and not part of XStream API.
Version 1.2
Released August 18, 2006.
Major changes
- JIRA:XSTR-269, Using attributes for fields (contributed by Paul Hammant and Ian Cartwright).
- Aliasing of arbitrary attributes.
- JIRA:XSTR-50, XStream can now serialize another XStream instance.
- JIRA:XSTR-227, XStream has now the XStreamer, that serializes an object together with its XStream instance.
- JIRA:XSTR-278, AnnotationConverter for fields (contributed by Guilherme Silveira).
- JIRA:XSTR-256, PureJavaReflectionProvider supports now final fields starting with JDK 1.5
- JIRA:XSTR-258, Any Collection type can now be declared implicit, the default implementation will be respected
for unmarshaling.
- JIRA:XSTR-88, XStream can now write all references as absolute XPath expression.
- JIRA:XSTR-62 and JIRA:XSTR-211, New SingeValueConverter allows light weight converters if the value can be
represented by a unique string.
- Aliasing of classes of a specific type.
- JIRA:XSTR-239, Support for certain types of proxies generated with the CGLIB Enhancer.
- JIRA:XSTR-90 and JIRA:XSTR-311, Support for BEA JRockit starting with R25.1.0 (contributed by Henrik
Ståhl of BEA).
Technology preview
- Experimental binary reader and writer.
- Experimental HierarichicalStreamCopier allows streams to be copied from one format to another without the
overhead of serialization.
- Experimental JSON support allows streams to be copied from one format to another without the overhead of
serialization (contributed by Paul Hammant).
Minor changes
- JIRA:XSTR-266, XStream fails to serialize elements of a unserializable class, that is a base class of a
derived class
- JIRA:XSTR-236, Priority constants for converter registration are now public
- JIRA:XSTR-215, XStream writes now fields in declaration order even for JVMs reporting them in reverse order
like IBM JDK.
- JIRA:XSTR-276 and JIRA:XSTR-283, XStream does no longer attempt to create references to implicit element.
- JIRA:XSTR-244, Closing a Writer can now be done twice, but any write attempt will later on fail.
- JIRA:XSTR-243, Transient fields were unmarshalled from XML.
- JIRA:XSTR-250, Providing a mapper to the XStream constructor will no longer result in a NPE.
- JIRA:XSTR-281, After registering a new converter, the internal converter cache is now cleared.
- JIRA:XSTR-284, XStream checks the object returned by a converter for compatibility.
- XStream no longer fails serializing a Throwable without cause when no references shall be written.
- Converter for java.awt.font.TextAttribute.
- Converter for java.nio.charset.Charset.
- JIRA:XSTR-286, XStream detects impossible self serialization and throws now an appropriate
ConversionException.
- JIRA:XSTR-291, XomDriver implementation added.
- JIRA:XSTR-299, Fix for implicit collections with items using the same name as the field name of the
underlying collection.
- JIRA:XSTR-245, Broken XML with custom serialization in certain cases (patch contributed by Cyrille Le Clerc).
- JIRA:XSTR-304, Bad handling of repairing namespace flag for StaxDriver (patch contributed by John Kristian).
API changes
- JIRA:XSTR-252, Refactored support for XML friendly character mapping.
- JIRA:XSTR-69, Refactored ReflectionConverter allows simpler subclassing.
- Unmarshalling context has now an overloaded version of the method convertAnother to provide the Converter
directly.
- Deprecate ClassMapper for Mapper. All methods with a ClassMapper parameter have now a duplicate taking only a
Mapper. The variant with the ClassMapper is deprecated.
- Deprecate c.t.x.alias.CannotResolveClassException for c.t.x.mapper.CannotResolveClassException.
- Deprecate NameMapper (was not used within XStream anymore anyway).
- Deprecate constructor of DefaultMapper taking an alternative name for the class attribute. Use the
aliasAttribute method.
- Deprecate attributeForImplementationClass, attributeForClassDefiningField, attributeForReadResolveField, and
attributeForEnumType in favour of the generalized aliasForAttribute in the Mapper interface.
- Removed all deprecated stuff from 1.1.x and 1.0.x
- JIRA:XSTR-211, A lot of existing (basic) Converters have been refactored to use the new SingleValueConverter
interface.
- Dom4JWriter uses now a DocumentFactory and a XMLWriter as constructor arguments.
Version 1.1.3
Released January 13, 2006.
Major changes
- Added XStream.toXML(OutputStream) and XStream.fromXML(InputStream).
- Ability to prevent fields from being serialized by calling XStream.omitField() or by implementing
Mapper.shouldSerializeMember().
- Added Converter for Enum, EnumMap and EnumSet
- JIRA:XSTR-186, Added BeanConverter (contributed by Andrea Aime)
- JIRA:XSTR-246, Added ISO8601SqlTimestampConverter (contributed by Cheong, Chung-Onn)
- Added ISO8601GregorianCaledarConverter
- JIRA:XSTR-215, Fixed support for IBM JVM (contributed by Gabor Liptak)
- Enhanced mode support for Blackdown JDK
- JIRA:XSTR-265, support for javax.security.auth.Subject
- JIRA:XSTR-233, support for Integer[] arrays
Minor changes
- Remove unnecessary PrintWriter wrapper in default writers (pointed out by Mathieu Champlon)
- Bugfix: EnumSet converter can now deal with empty sets (contributed by Baba Buehler)
- Update ISO8601DateConverter to use Joda 1.0
- JIRA:XSTR-242, GregorianCalenderConverter saves now the timezone
- JIRA:XSTR-247, ISO8601DateConverter now independent on timezone
- JIRA:XSTR-263, Circular references with Externalizable objects fail
API changes
Version 1.1.2
Released April 30, 2005. Most popular feature requests implemented. Java 5 Enum support. Serialization of
JavaBeans using accessors. Aliasing of fields. StAX integration, with namespaces. Improved support on JDK 1.3 and IBM
JDK.
Major changes
- JIRA:XSTR-186, Option to serialize JavaBeans using public accessors, rather than private fields (contributed
by Andrea Aime).
- Ability to alias fields as well as classes, using XStream.addFieldAlias().
- JIRA:XSTR-70, JIRA:XSTR-204 Support for JDK 5 enums (contributed by Eric Snell and Bryan Coleman).
- JIRA:XSTR-206 Clean representation of JDK 5 EnumMap and EnumSet.
- XStream can now be built using JDK 1.3 (previously it required JDK 1.4 to compile, but 1.3 to run).
- JIRA:XSTR-215, Enhanced mode is now supported on the IBM 1.4 JDK.
- The default HierarchicalStreamWriter implementation is supplied by the HierarichicalStreamDriver (as well as
the reader).
Minor changes
- JIRA:XSTR-104 HierarchicalStreamReader now exposes all available attributes to the Converter implementations
(contributed by Trygve Laugstol).
- Bugfix: Externalizable deserialization supported for objects not at the root of tree.
- JavaMethodConverter handles non public methods/constructors (contributed by Kevin Ring).
- PropertiesConverter also serializes default properties, if present (contributed by Kevin Ring).
- Bugfix: In some cases, XppReader and StaxReader would get confused when calling hasMoreChildren() and
getValue() on the same node.
- JIRA:XSTR-217, ISO8601DateConverter now requires joda-time-1.2.1
- PrettyPrintWriter and CompactWriter may have their text/attribute escaping rules customized by overriding
writeText() and writeAttributeValue().
API changes
- HierarchicalStreamDriver implementations now require a createWriter() method. The simplest implementation is
to return a new PrettyPrintWriter.
- Introduced ReaderWrapper/WriterWrapper classes to make it easier to wrap (decorate)
HierarchicalStreamReader/Writer instances.
Version 1.1.1
Released March 7, 2005. Mostly bugfixes and minor feature enhancements.
Major changes
- Converters can be registered with a priority, allowing more generic filters to handle classes that
don't have more specific converters.
- Converters can now access underlying HierarchicalStreamReader/Writer implementations to make implementation
specific calls.
- Improved support for classes using ObjectInputFields to follow the serialization specification.
- JIRA:XSTR-179 Support for ObjectInputStream.registerValidation(ObjectInputValidation).
- JIRA:XSTR-178 Serialized inner class now maintains reference to outer class.
- JIRA:XSTR-199 Default ClassLoader may be changed using XStream.setClassLoader().
Minor changes
- Bugfix: Thread context classloader is loaded by the correct thread. (Thanks to Padraic Renaghan for pointing
this out).
- Bugfix: Default implementations of aliased classes were not being deserialized by SerializableConverter.
- Bugfix: JIRA:XSTR-180 Serializable objects support defaultReadObject() even when no default fields available.
- Bugfix: For serialized objects class hierarchy is serialized starting with superclass (as per Java Object
Serialization).
- Bugfix: readObject() is now called for classes containing only transient fields.
- Bugfix: Order of fields are maintained when calling ObjectOutputStream.putFields().
- Bugfix: FontConverter extended to support FontUIResource which does some awkward native calls.
- Bugfix: Deserialization of very complicated graphs (such as Swing components) sometimes resulted in broken
object references. Now fixed.
- Bugfix: JIRA:XSTR-188 Classes that use readResolve()/writeReplace() can now return different types.
- Bugfix: JIRA:XSTR-185, JIRA:XSTR-195 Support for loading of array classes for classes that have not yet been
loaded. (Thanks to Henri Tremblay and Simon Daniel)
- Bugfix: JIRA:XSTR-190 PrettyPrintWriter and CompactWriter escape characters in XML attributes.
- Bugfix: JIRA:XSTR-176, JIRA:XSTR-196 The XStream ObjectInputStream and ObjectOutputStream implementations now
propegate the flush() and close() events to the underlying streams.
- Bugfix: JIRA:XSTR-192 Implicit collection mappings are now supported in inheritance hierarchies.
API changes
- ClassMapper is now deprecated. Replaced with MapperWrapper.
- HierarchicalStreamWriter implementations must now implement close(), flush() and underlyingWriter().
- HierarchicalStreamReader implementations must now implement close() and underlyingReader().
Version 1.1
Released January 15, 2005. Focus on support for objects defining custom serialization using the standard Java serialization mechanism.
Major changes
- Provides drop in replacement for ObjectInputStream and ObjectOutputStream, using
XStream.createObjectInputStream() and XStream.createObjectOutputStream() and XStream.createObjectInputStream(). This
provides support for streaming objects.
- Support for objects that specify their own serialization schemes by implementing readObject() and
writeObject() (as in Java serialization spec). This includes support for ObjectInputStream.getFields() and
ObjectOuputStream.putFields().
- Support for objects to serialize other objects to the stream by implementing writeReplace() (as in Java
serialization spec).
- Support for any object that performs custom serialization by implementing java.io.Externalizable (as in Java
serialization spec).
- Implicit collections can be specified for classes, allowing the element wrapping the collection to be
skipped.
- New writer implementations to allow XStream to serialize directly to a SAX stream or TrAX pipeline.
- The MarshallingContext and UnmarshallingContext interfaces now extend DataHolder, allowing arbitrary data to
be stored by the user whilst walking the object graph and passed around to Converters. DataHolders can also be passed
into XStream from the outside.
- Includes new DomWriter implementation to serialize directly to a W3C DOM tree (to complement the existing
DomReader).
- Better support for instantiating objects on non Sun 1.4+ JVMs, including non-public constructors, private
static inner classes and ANY class that implements java.io.Serializable.
- DOM, DOM4J, JDOM, XOM, Electric-XML, SAX, STAX
- Specific ClassLoaders can be passed into XStream, to allow for greater compatibility in J2EE containers.
- Ability to change the default converter
- Added optional ISO8601DateConverter for full ISO8601 date format support. The converter is not registered by
default as it requires the joda-time dependency (http://joda-time.sf.net). To use, ensure joda-time is in classpath
and register explicitly.
- Enhanced mode is now supported on the Apple 1.4 JDK.
Minor changes
- PrettyPrintWriter only flushes stream when necessary - large performance improvement for serialization.
- Added XStream.fromXml(xml, root) convenience methods for deserializing into an existing root object.
- JDK 1.3 compatibility: Added mechanism for accessing nested exception.
- JDK 1.3 compatibility: GregorianCalendarConverter only calls Calendar.getTimeInMillis() the JDK supports it.
- Bugfix: All caches are now synchronized - there were some thread safety issues.
- Bugfix: Only immutable basic types will have references ignored in XML (for clarity).
- Bugfix: Class names can contain underscores.
- Bugfix: Support for '\0' char.
- Bugfix: PropertyConverter no longer attempts to serialize subclasses of Properties.
- Bugfix: JVM detection uses system properties, which is more accurate than searching the classpath.
API changes
- XStream.addDefaultCollection() has been deprecated. Use XStream.addImplicitCollection() instead.
Version 1.0.2
Released August 7, 2004. Focus on improving the converters bundled with XStream to support a wider range of
types.
Major changes
- XML elements are written in order they are defined in class, rather than alphabetical.
- Converters for java.io.File, java.sql.Timestamp, java.awt.Color, and dynamic proxies are now registered by
default.
- EncodedByteArrayConverter is now registered by default and uses a single Base64 string to store the contents
of a byte[]. This now works on all JVMs as it no longer relies on Sun specific classes. This converter will also
unmarshal byte[] that have been serialized without it, for backwards compatability.
- New converters for java.sql.Time, java.sql.Date, java.util.Locale, java.util.Currency, java.util.Calendar and
java.awt.Font.
- All caching is done in XStream instance instead of statics, allowing applications that use hot redeployment
of classes to use XStream in a parent classloader.
- XStream will fail fast if a field value is defined more than once in XML when deserializing.
Minor changes
- The <entry> element used in Maps can now be specified by creating an alias for java.util.Map.Entry.
- Bugfix: Fields with characters that generate invalid XML (such as $ signs) are now escaped.
- Bugfix: Pre-instantiated objects can be unmarshalled through multiple levels.
API changes
Version 1.0.1
Released May 30, 2004. Misc features and bugfixes.
Major changes
- Support for multidimensional arrays.
- Object with readResolve() method will be treated the same way native serialization treats them.
Minor changes
- New converters for Throwable and StackTraceElement that retain stack trace (JDK 1.4 only)
- Bugfix: System.identityHashCode() is not guaranteed to be unique. Ensure reference checking is used as well.
- Bugfix: Allows user classes to be defined in WEB-INF/classes in Servlet environments. Tries to use context
classloader if available.
- Support for java.util.Currency (through readResolve()).
- Instances of Jakarta Commons Lang Enum are now reused (through readResolve()).
- Bugfix: JavaClassConverter handles primitive type classes (contributed by Matthew Sandoz).
API changes
- Additional method: ConverterLookup.defaultConverter(). Custom implementations of this class should implement
this new method.
Version 1.0
Released May 14, 2004. Focusses on finalizing the API for 1.0 release.
Major changes
- Supports fields of same name, hidden by inheritance.
Minor changes
- JavaDoc for most important parts of API.
API changes
- The ReflectionConverter and ReflectionProviders have had an overhaul to support hidden fields. Most methods
now take an extra argument to specify which class a field is declared in.
Version 1.0 (release candidate 1)
Released May 9, 2004. Focusses on finalizing the API for 1.0 release.
Major changes
- JDK 1.3 compatibility.
- Informative error messages.
- Defaults to using faster XPP based parser.
- Serializes final field under JDK 1.4.
- Fail fast when trying to serialize final field if not Sun 1.4 JRE.
Minor changes
- Misc performance improvements.
- Converters for TreeMap and TreeSet that store the Comparator.
API changes
- Default constructor for XStream class uses XppDriver instead of DomDriver. To use DomDriver, explicitly pass
it in to the constructor.
- Exception is thrown if trying to serialize an object that contains a final field if not Sun 1.4 JRE.
About XStream version numbers...
Version 0.6
Released May 7, 2004. Focusses on providing full object graph support.
Major changes
Minor changes
- Bugfix: Objects that had no children could not be derefenced properly (thanks to Brian Slesinsky and Nick
Pomfret).
- Bugfix: DateConverter is now thread safe.
- Optimization: String instances are reused as much as possible.
- Converters for BigInteger and BigDecimal.
- IntConverter now recognises hexadecimal and octal notations (thanks to Konstantin Pribluda).
API changes
Version 0.6 (release candidate 1)
Released April 19, 2004. Focusses on providing full object graph support.
Major changes
- Full support for object graphs, including duplicate references of same object and circular references.
- References can be identified using XPath (default), unique-IDs or disabled.
Minor changes
- Release includes Ant build file.
- Converters for non standard collections such as Collections.EMPTY_LIST, syncronizedList(), unmodifiableMap(),
etc.
- Converter for nulls.
- Converter for dynamic proxies.
- Converter for java.net.URL.
- Converters for java.util.LinkedHashMap and java.util.LinkedHashSet.
- Converters for java.lang.reflect.Method and java.lang.reflect.Constructor.
- If duplicate reference support is disabled and a circular reference is encountered, an exception will be
thrown.
API changes
Version 0.5
Released March 8, 2004. Focussed on performance.
Major changes
- Massive performance improvements. Up to 3 times faster for serialization and 22 times faster for
deserialization!
- Non-DOM building pull parser based reader. Results in much smaller memory footprint, particularly when
deserializing large object models.
Minor changes
- Misc performance improvements.
- Misc bugfixes.
- Alternate encodings can be used with DomDriver.
API changes
- Renamed XMLReader/Writer to HierarchicalStreamReader/Writer as XStream is not actually coupled to serializing
just to XML.
- Cleaned up the public API.
- Moved internal XStream implementation classes to core package.
- Misc package/class renames to make more sense. Dumped lots of dead code.
Version 0.4
This version was never publicly released. All changes were made available in 0.5. Focussed on making it easier
to create custom converters.
Major changes
- Overhaul of interface for Converters. Makes Converters much cleaner to write.
Minor changes
- Added custom converters for java.io.File, java.util.Properties, java.util.Vector, java.util.Hashtable,
java.util.BitSet byte[] (Base64 encoded), char[].
- Misc bugfixes.
API changes
- New interface to be implemented by custom converters.
Version 0.3
Released January 1, 2004.
Major changes
- Added ElementMapper interface and default implementations to allow fine grained control over element name to
class mapper operations.
- Added an XPP based reader and writer that uses a pull-parser to create a lightweight DOM tree.
Minor changes
- Added XStream.fromXML(XMLReader xmlReader,Object root) method to allow the population of an object graph
starting with a live object root.
- Added XMLReader.peek() method to allow access to the underlying hierarchical object being unmarshalled.
API changes
- Aligned the the methods in XStream to use the specified ObjectFactory in the constructor instead of creating
a SunReflectionObjectFactory.
Older versions
Changes in XStream prior to version 0.3 were not logged.


ClassToggle.js Example
Use case 1: one-way state switch
Button
It worked!
Use case 2: two-way state switch
Button
It worked!
Use case 3: three-way state switch
Button
It worked!
Use case 4: dubble trigger
Button
Button
It worked!


May 28, 2013 - May 31, 2013
Trips: 4 (306 Total)
| Trip ID | Start Station | Start Time | End Station | End Time | Duration |
|---|---|---|---|---|---|
| 93749 | Trip Completed | 5/31/13 6:47:15 PM | E 11 St & Broadway | 6/1/13 2:03:22 PM | 19h 16m 7s |
| 85475 | Trip Completed | 5/31/13 1:35:24 PM | 6 Ave & Canal St | 5/31/13 1:39:00 PM | 3m 36s |
| 81952 | E 43 St & Vanderbilt Ave | 5/31/13 8:28:12 AM | Trip Completed | Trip Completed | |
| 62652 | 6 Ave & Canal St | 5/29/13 7:18:57 PM | W 46 St & 11 Ave | 5/29/13 7:48:09 PM | 29m 12s |


The chrome.pushMessaging
API was deleted in Chrome 43. This
document exists for posterity only.
Use the new Google Cloud Messaging.
You can provide feedback about Google Cloud Messaging and the chrome.gcm API through the Google Group GCM for Chrome Feedback. Use this group to ask for help with transition to the new API, file bug reports, and request features.


Home
Log In
Sign Up
Districts
Search
Email address
We'll never share your email with anyone else.
Password
Submit


ACCEPT
Check
disabled
ACCEPT
Check
ACCEPT
Check
disabled
ACCEPT
Check
ACCEPT
Check
disabled
ACCEPT
Check
ACCEPT
Check
disabled
ACCEPT
Check
ACCEPT
Check
disabled
ACCEPT
Check
ACCEPT
Check
disabled
ACCEPT
Check
Accept
Check
disabled
Accept
Check
disabled
Accept
Check
disabled
Accept
Check
disabled
Accept
Check
disabled
Accept
Check
disabled


Around
DIAG
Made for Interactive Graphics Class
Time
36
Fuel
Record
0
Score
36
Try to collect fuels by WASD or arrow keys.


Just notified that my copy of /A Dance with Dragons/ shipped. Now to finish my catchup so I can read it!
7/11/2011, 1:44:28 PM
Favs: 0
Retweets: 0
link--- layout: tweet ---
Just notified that my copy of /A Dance with Dragons/ shipped. Now to finish my catchup so I can read it!
7/11/2011, 1:44:28 PM
Favs: 0
Retweets: 0
link


Not connected
Home team
no name
Points
0
Away team
no name
Points
0
Quarter
1
Game clock
0:00
Break timer
0:00
New game
Home team
Away team
Quarter length (min)
# of quarters
Halftime length (min)


{% extends "../../templates/theme/bage.html" %} {% block head %}
GDMD means Global Disaster Data Master Directory. It is a directory, a hub and a clearinghouse for disaster data in the world. It is also a tool for disaster data directory present, search, publish, mining and analyzing.
• Present: show the directory in same classification system with rich metadata.
• Search: search the directory in local database, federated database, and spatial map style.
• Publish, release the metadata in local or harvest the data catalog with same interface.
• Mining, mining the metadata semantic and produce more labels for data discovery.
• Analyzing, analyzing the linked data and producing disaster data knowledge graph.
| Standard | Version(s) |
|---|---|
| OGC API - Records - Part 1: Core | 1.0 |
| OGC API - Features - Part 3: Filtering and CQL | draft |
| OGC CSW | 2.0.2/3.0.0 |
| OGC Filter | 1.1.0/2.0.0 |
| OGC OWS Common | 1.0.0/2.0.0 |
| OGC GML | 3.1.1 |
| OGC SFSQL | 1.2.1 |
| OGC GeoRSS | 1.0 |
| Dublin Core | 1.1 |
| SOAP | 1.2 |
| ISO 19115 | 2003 |
| ISO 19139 | 2007 |
| ISO 19119 | 2005 |
| NASA DIF | 9.7 |
| FGDC CSDGM | 1998 |
| GM03 | 2.1 |
| SRU | 1.1 |
| OGC OpenSearch | 1.0 |
| OAI-PMH | 2.0 |


Paper Talk: Man Utd to land duo in £200m January splurge
Manchester United are ready to fork out £200m to land two attacking stars in January, while Bobby Duncan has revealed the real reason for leaving Liverpool – all in Friday’s papers.
UNITED PLANNING £200M DOUBLE RAID
Manchester United are reportedly weighing up a £200m double January transfer swoop for Jadon Sancho and Erling-Braut Haaland.
Ole Gunnar Solskjaer has identified the 19-year-old duo as his priority targets, with United ready to move swiftly when the window re-opens, to try to land them ahead of their rivals, according to the Daily Mirror.
Both are likely to cost United close to £200million, with Borussia Dortmund and England winger Sancho valued at £100m and RB Salzburg and Norway frontman Haaland at £85m.
Sancho is currently having a difficult time at Dortmund, with United alerted to his potential availability in January, rather than next summer, when they had planned to move for him.
As for Haaland, United hope his relationship with Solskjaer, who managed him at Molde, can give them a head start over their rivals in the race to sign one of Europe’s most prolific young strikers.
Haaland, son of former City and Leeds midfielder Alf-Inge, has already scored 22 goals in 16 appearances this season – including seven in the Champions League.
United have had Haaland watched several times this season, with Solskjaer sending one of his senior scouts, Simon Wells, to assess the youngster in recent weeks.
If United were successful in their pursuit of Haaland, one option would be to loan him back to RB Salzburg for the remainder of the season, delaying his permanent move until next summer.
AND THE REST
Manchester United are among the sides leading the charge to sign Sporting Kansas City wonderkid Gianluca Busio (Daily Mirror)
The father of Moise Kean admits he should never have sent his son to Everton – and is desperate for him to quit Goodison Park in January (The Sun)
Tottenham No 1 Hugo Lloris is targeting a return to football as early as January after his horror elbow injury (The Sun)
Danilo has laid into Manchester and the City fans by claiming they lack passion and the food on offer is poor (The Sun)
Brendan Rodgers has received another windfall from Liverpool four years after they gave him a £15m pay-off, with his former club paying him £3.75m to buy the house on Merseyside that he has been renting to Jurgen Klopp since the German replaced him at Anfield (Daily Mail)
Gareth Southgate is considering switching formations for the European Championship, which could involve a return to three at the back due to worries over his side’s defending (Daily Mail)
Neil Warnock is not ready to retire after leaving Cardiff City by mutual consent earlier this week (Daily Mail)
Bobby Duncan insists he left Liverpool to play first-team football and not for the money (Daily Mail)
Hull City are refusing to pay Barnsley a £200,000 final transfer fee instalment for defender Angus MacDonald who was diagnosed with cancer.
West Brom fear they may have to cash in on Nathan Ferguson in January to avoid losing him for minimal compensation next summer (Daily Mail)
Sporting Lisbon midfielder Bruno Fernandes has admitted he has ‘dreams to fulfil’ as he continues to be linked with a move to the Premier League (Daily Mail)
Leroy Sane’s Manchester City team-mates are increasingly convinced the Germany winger will leave the club for Bayern Munich next year (Daily Telegraph)
Michael O’Neill has left the door open to stepping away from Northern Ireland before a potential Euro 2020 play-off next year (Daily Telegraph)
Cristiano Ronaldo doesn’t have any injury worries, despite Juventus’ claim that he’s in pain, according to Portugal boss Fernando Santos (Daily Express)
Barcelona striker Antoine Griezmann believes the tactics of coach Ernesto Valverde has been a factor behind his difficult start to life at the Nou Camp (Daily Express)
Hearts have announced a profit of £1.6m for the financial year ending June 30, largely due to the contribution of £3.25m from unnamed benefactors (Daily Record)
Rangers midfielder Glen Kamara insists he is ignoring rumours linking him with a move away from Ibrox (Daily Record)
Celtic striker Odsonne Edouard could miss over half of his side’s Euro qualifiers next year after revealing his Olympics dream (Scottish Sun)
Steve Clarke has joked he’d only be tempted away from the Scotland job by Real Madrid (Scottish Sun)


User:suri
Date: 18-02-2014
Visa Type: 1A Employement Visa
Sponsor: ITON CORP
New Passport Details:
Person Details:


This page is intended for the FIXED Token as sample only. You can send token and you can approve token. Additionally you can add a token to the exchange provided in this example.


{% extends "base.html" %} {% block body_content %} {% from "_macros.html" import render_field, render_hidden %}
Please provide feedback for {{feedback_request.entry.requested_by_name}}
Feedback can be really important when helping each one of us work as effectively as possible for the taxpayer. Remember to be constructive - what can someone do to improve a behaviour?
Be specific. Was there a particular task or situation? What did they do? What was the result of them acting the way they did? If they've included their objectives when asking for feedback, it may be useful to think first about examples related to those.