xstreamXStream.setupDefaultSecurity(this); to be removed after 1.5 xstream.allowTypesByWildcard(new String[] { com.your.package.** So essentially, you willXStream XStream XstreamOXMapping XML,JavaBeanXML