search

schemacrawler / SchemaCrawler

Free database schema discovery and comprehension tool
http://www.schemacrawler.com/
Other
1.6k stars 199 forks source link

Offline Snapshots: Warning "XStream is probably vulnerable" #200

Closed patric-r closed 6 years ago

patric-r commented 6 years ago

When reading an offline snapshot, using the code from https://github.com/schemacrawler/SchemaCrawler/blob/48275a508c9f1624e0870dea1b4707e01094f1d7/schemacrawler-offline/src/test/java/schemacrawler/integration/test/LoadSnapshotTest.java#L68-L78

at least on oracle jdk 1.8.0_65, a warning is issued:

Security framework of XStream not initialized, XStream is probably vulnerable.

sualeh commented 5 years ago

Please use SchemaCrawler 15.01.03 - the serialization strategy has changed.