Added Signature Class to XStream Allowlist

baloise · Apr 14, 2023 · 6483438 · 6483438
1 parent a8e9885
commit 6483438
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/main/resources/atlassian-plugin.xml b/src/main/resources/atlassian-plugin.xml
@@ -59,7 +59,11 @@
         </parameters>
     </xhtml-macro>
 
-    <rest key="com.baloise.confluence:digital-signature" path="/signature" version="1.0">
+    <xstream-security key="xstream-set" name="Signature Class Allowance for Xstream Deserializer">
+        <type>com.baloise.confluence.digitalsignature.Signature</type>
+    </xstream-security>
+
+    <rest key="com.baloise.confluence:digital-signature" path="/signature" version="1.0">    
         <description>Provides signature services.</description>
         <package>com.baloise.confluence.digitalsignature.rest</package>
     </rest>