XStream介绍及简单使用

XStream的介绍

  XStream是一种OXMapping 技术，是用来处理XML文件序列化的框架,在将JavaBean序列化，或将XML文件反序列化的时候，不需要其它辅助类和映射文件，使得XML序列化不再繁索。XStream也可以将JavaBean序列化成Json或反序列化，使用非常方便。

使用问题及解决方法

## 使用时抛出警告
     XStream1.4.10 出现警告：Security framework of XStream not initialized, XStream is probably vulnerable
     XStream的安全框架没有初始化，xstream 容易受攻击
## 解决方法:          
    XStream对象设置默认安全防护，同时设置允许的类
    ---------------------------我是分割线,代码如下--------------------------  
    '''
    XStream xStream = new XStream();
    xStream.setupDefaultSecurity(xStream);
    xStream.allowTypes(new Class[]{Person.class});  
    '''

XStream的基本使用

pom依赖

'''


  com.thoughtworks.xstream
  xstream
  1.4.10

'''

Xstream序列化XML

    '''
    XStream xStream = new XStream(new StaxDriver());
    xStream.setupDefaultSecurity(xStream);
    xStream.allowTypes(new Class[]{Person.class});
    Person bean = new Person("杨大壮",18);
    xStream.alias("人",Person.class);
    //XML序列化
    String xml = xStream.toXML(bean);
    System.out.println(xml);
    //XML反序列化
    bean=(Person)xStream.fromXML(xml);
    System.out.println(bean);
    '''

程序运行结果：
<人>杨大壮18
Person [name=杨大壮, age=18]

Xstream序列化Json

注意：Xstream序列化Json时，需要引入jettison-[version].jar

'''


  org.codehaus.jettison
  jettison
  1.4.0

'''
 
    '''
    XStream xstream = new XStream(new JettisonMappedXmlDriver());//设置Json解析器
    xstream.setMode(XStream.NO_REFERENCES);//设置reference模型,不引用
    Person bean=new Person("杨大壮",20);
xstream.alias("人",Person.class);//为类名节点重命名
    //Json序列化
    String xml = xstream.toXML(bean);
System.out.println(xml);
//Json反序列化
bean=(Person)xstream.fromXML(xml);
System.out.println(bean);
    '''

运行结果：
{"人":{"name":"杨大壮","age":20}}
Person [name=杨大壮, age=20]

Xstream注解的使用

设置Xstream应用注解

XStream xstream =  new  XStream();
xstream.processAnnotations(Person.class);
xstream.autodetectAnnotations(true);

重命名注解：@XStreamAlias()

@XStreamAlias("人")
class  Person {
@XStreamAlias("姓名")
private  String name;
@XStreamAlias("年龄")
private  int age;
@XStreamAlias("朋友")
private  List friends;
public  Person(String name,  int age,  String... friends) {
this.name = name;
this.age = age;
this.friends =  Arrays.asList(friends);
}
@Override
public  String toString() {
return  "Person [name="  + name +  ", age="  + age +  ", friends="  + friends +  "]";
}
}
···
程序运行结果：
<人>
<姓名>杨大壮
<年龄>20
<朋友  class="java.util.Arrays$ArrayList">

李四
王五
赵六



Person  [name=杨大壮, age=20, friends=[李四,  王五,  赵六]]

##把字段节点设置成属性：@XStreamAsAttribute
class  Person {
@XStreamAsAttribute
private  String name;
@XStreamAsAttribute
private  int age;
private  List friends;
public  Person(String name,  int age,  String... friends) {
this.name = name;
this.age = age;
this.friends =  Arrays.asList(friends);
}
@Override
public  String toString() {
return  "Person [name="  + name +  ", age="  + age +  ", friends="  + friends +  "]";
}
}
程序运行结果：



李四
王五
赵六



Person  [name=杨大壮, age=20, friends=[李四,  王五,  赵六]]

## Xstream对象流的使用
**Xstream对象输出流**
class  Person {
private  String name;
private  int age;
public  Person(String name,  int age) {
this.name = name;
this.age = age;
}
}
public  class  Test {
public  static  void main(String[] args)  throws  IOException {
XStream xstream =  new  XStream();
ObjectOutputStream out = xstream.createObjectOutputStream(System.out);
out.writeObject(new  Person("张三",12));
out.writeObject(new  Person("李四",19));
out.writeObject("Hello");
out.writeInt(12345);
out.close();
}
}

程序运行结果：


张三
12


李四
19

Hello
12345


**Xstream对象输出流**
class  Person {
private  String name;
private  int age;
public  Person(String name,  int age)
{
this.name = name;
this.age = age;
}
@Override
public  String toString() {
return  "Person [name="  + name +  ", age="  + age +  "]";
}
}
public  class  Test {
public  static  void main(String[] args)  throws  IOException,  ClassNotFoundException {
String s="张三1212345";
StringReader reader =  new  StringReader(s);
XStream xstream =  new  XStream();
ObjectInputStream in = xstream.createObjectInputStream(reader);
System.out.println((Person) in.readObject());
System.out.println(in.readInt());
}
}

程序运行结果：
Person  [name=张三, age=12]
12345

## Xstream持久化API
class  Person {
private  String name;
private  int age;
public  Person(String name,  int age) {
this.name = name;
this.age = age;
}
@Override
public  String toString() {
return  "Person [name="  + name +  ", age="  + age +  "]";
}
}
public  class  Test {
public  static  void main(String[] args)  throws  IOException,  ClassNotFoundException {
PersistenceStrategy strategy =  new  FilePersistenceStrategy(new  File("D:\\tmp"));
List list =  new  XmlArrayList(strategy);
list.add(new  Person("张三",13));//保存数据
list.add(new  Person("李四",21));
list.add(new  Person("王五",17));
}
}

程序运行结果：如果我们检查D:\tmp目录,有三个文件:[email protected]、[email protected]、[email protected]；每个对象都被序列化到XML文件里。