xstreamXStream.setupDefaultSecurity(this); to be removed after 1.5 xstream.allowTypesByWildcard(new String[] { com.your.package.** So essentially, you willnversionException: Element url of type .URL is not defined as field in type org.sample.xstream.SomeBean The rht way.