This feature sets up a default security framework as outlined in the XStream Security Framework. The product includes an allow list which limits the application objects for deserialization. This protects customers from unsafe objects using deserialization.