xStream:Security framework of XStream not initialized, XStream is probably vulnerable.
意思是:xstream的安全框架没有初始化,xstream容易受攻击。解决方法:xStream对象设置默认安全防护,同时设置允许的类XStreamxStream=newXStream();XStream.setupDefaultSecurity(xStream);xStream.allowTypes(newClass[]{Test.class,Test1.class});来自网友评论本身是一种安全