The JavaBeanConverter does not respect java bean properties that are omitted and don't have a corresponding member variable. This occurs because XStream reads the value of a field before deciding whether to omit it or not.
The following class illustrates the bug:
Even though "unsafe" is marked as omitted, XStream still reads the value before deciding to omit it.
I think that xstream should check to see if the field is omitted before reading the value because there are cases where a method may be potentially dangerous or expensive to run.