diff --git a/src/main/java/org/kantega/notsoserial/DefaultNotSoSerial.java b/src/main/java/org/kantega/notsoserial/DefaultNotSoSerial.java index 24b38df..486f71b 100644 --- a/src/main/java/org/kantega/notsoserial/DefaultNotSoSerial.java +++ b/src/main/java/org/kantega/notsoserial/DefaultNotSoSerial.java @@ -38,14 +38,16 @@ public class DefaultNotSoSerial implements NotSoSerial { private Set deserializingClasses = new ConcurrentSkipListSet(); public DefaultNotSoSerial() { - blacklist.add(internalName("org.apache.commons.collections.functors.InvokerTransformer")); - blacklist.add(internalName("org.apache.commons.collections4.functors.InvokerTransformer")); - blacklist.add(internalName("org.apache.commons.collections.functors.InstantiateTransformer")); - blacklist.add(internalName("org.apache.commons.collections4.functors.InstantiateTransformer")); - blacklist.add(internalName("org.codehaus.groovy.runtime.ConvertedClosure")); - blacklist.add(internalName("org.codehaus.groovy.runtime.MethodClosure")); - blacklist.add(internalName("org.springframework.beans.factory.ObjectFactory")); - blacklist.add(internalName("com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl")); + if (System.getProperty("notsoserial.useDefaultBlacklist", "true").equals("true")) { + blacklist.add(internalName("org.apache.commons.collections.functors.InvokerTransformer")); + blacklist.add(internalName("org.apache.commons.collections4.functors.InvokerTransformer")); + blacklist.add(internalName("org.apache.commons.collections.functors.InstantiateTransformer")); + blacklist.add(internalName("org.apache.commons.collections4.functors.InstantiateTransformer")); + blacklist.add(internalName("org.codehaus.groovy.runtime.ConvertedClosure")); + blacklist.add(internalName("org.codehaus.groovy.runtime.MethodClosure")); + blacklist.add(internalName("org.springframework.beans.factory.ObjectFactory")); + blacklist.add(internalName("com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl")); + } String blacklistProperty = System.getProperty("notsoserial.blacklist"); if(blacklistProperty != null) {