- Made BlazeDS use the ClassDeserializationValidator as default validator, if no validator is provided.
- Adjusted the classes in the ClassDeserializationValidator default classes to explicitly list each class instead of using wildcards.

If you are getting errors, you need to explicitly list the classes you want to allow:

        <validator class="flex.messaging.validators.ClassDeserializationValidator">
                    <class name="remoting.amfclient.ClientCustomType"/>
                    <class name="remoting.amfclient.ServerCustomType"/>
                    <class name="my.package.*"/>

    ... snip ...

9 files changed