xstreamXStream.setupDefaultSecurity(this); to be removed after 1.5 xstream.allowTypesByWildcard(new String[] { com.your.package.** So essentially, you willyou can do that by overriding the default marshaller. import org.springframework.oxm.xstream.XStreamMarshaller; import