jdk7u.jaxp.org.apache.xerces.external.utils

Class XMLSecurityManager

java.lang.Object

jdk7u.jaxp.org.apache.xerces.external.utils.XMLSecurityManager

public final class XMLSecurityManager
extends Object

This class manages standard and implementation-specific limitations.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	XMLSecurityManager.Limit Limits managed by the security manager
static class	XMLSecurityManager.NameMap Map old property names with the new ones
static class	XMLSecurityManager.State States of the settings of a property, in the order: default value, value set by FEATURE_SECURE_PROCESSING, jaxp.properties file, jaxp system properties, and jaxp api properties

Constructor Summary

Constructors

Constructor and Description
XMLSecurityManager() Default constructor.
XMLSecurityManager(boolean secureProcessing) Instantiate Security Manager in accordance with the status of secure processing

Method Summary

Methods

Modifier and Type	Method and Description
static XMLSecurityManager	convert(Object value, XMLSecurityManager securityManager) Convert a value set through setProperty to XMLSecurityManager.
void	debugPrint(XMLLimitAnalyzer limitAnalyzer)
int	getIndex(String propertyName) Get the index by property name
int	getLimit(XMLSecurityManager.Limit limit) Return the value of the specified property
String	getLimitAsString(String propertyName) Return the value of the specified property
String	getLimitValueAsString(XMLSecurityManager.Limit limit) Return the value of a property by its ordinal
String	getLimitValueByIndex(int index) Return the value of a property by its ordinal
XMLSecurityManager.State	getState(XMLSecurityManager.Limit limit) Return the state of the limit property
String	getStateLiteral(XMLSecurityManager.Limit limit) Return the state of the limit property
boolean	isNoLimit(int limit) Check if there's no limit defined by the Security Manager
boolean	isOverLimit(int index, String entityName, int size, XMLLimitAnalyzer limitAnalyzer) Check if the value (length or count) of the specified limit property is over the limit
boolean	isOverLimit(int index, XMLLimitAnalyzer limitAnalyzer)
boolean	isOverLimit(XMLSecurityManager.Limit limit, String entityName, int size, XMLLimitAnalyzer limitAnalyzer) Check if the size (length or count) of the specified limit property is over the limit
boolean	isOverLimit(XMLSecurityManager.Limit limit, XMLLimitAnalyzer limitAnalyzer) Check against cumulated value
boolean	isSecureProcessing() Return the state of secure processing
boolean	isSet(int index) Indicate if a property is set explicitly
boolean	printEntityCountInfo()
void	setLimit(int index, XMLSecurityManager.State state, int value) Set the value of a property by its index
void	setLimit(int index, XMLSecurityManager.State state, Object value) Set the value of a property by its index
boolean	setLimit(String propertyName, XMLSecurityManager.State state, Object value) Set limit by property name and state
void	setLimit(XMLSecurityManager.Limit limit, XMLSecurityManager.State state, int value) Set the value for a specific limit.
void	setSecureProcessing(boolean secure) Setting FEATURE_SECURE_PROCESSING explicitly

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XMLSecurityManager

public XMLSecurityManager()

Default constructor. Establishes default values for known security vulnerabilities.

XMLSecurityManager

public XMLSecurityManager(boolean secureProcessing)

Instantiate Security Manager in accordance with the status of secure processing

Parameters:

secureProcessing -

Method Detail

setSecureProcessing

public void setSecureProcessing(boolean secure)

Setting FEATURE_SECURE_PROCESSING explicitly

isSecureProcessing

public boolean isSecureProcessing()

Return the state of secure processing

Returns:

the state of secure processing

setLimit

public boolean setLimit(String propertyName,
               XMLSecurityManager.State state,
               Object value)

Set limit by property name and state

Parameters:

propertyName - property name

state - the state of the property

value - the value of the property

Returns:

true if the property is managed by the security manager; false if otherwise.

setLimit

public void setLimit(XMLSecurityManager.Limit limit,
            XMLSecurityManager.State state,
            int value)

Set the value for a specific limit.

Parameters:

limit - the limit

state - the state of the property

value - the value of the property

setLimit

public void setLimit(int index,
            XMLSecurityManager.State state,
            Object value)

Set the value of a property by its index

Parameters:

index - the index of the property

state - the state of the property

value - the value of the property

setLimit

public void setLimit(int index,
            XMLSecurityManager.State state,
            int value)

Set the value of a property by its index

Parameters:

index - the index of the property

state - the state of the property

value - the value of the property

getLimitAsString

public String getLimitAsString(String propertyName)

Return the value of the specified property

Parameters:

propertyName - the property name

Returns:

the value of the property as a string. If a property is managed by this manager, its value shall not be null.

getLimit

public int getLimit(XMLSecurityManager.Limit limit)

Return the value of the specified property

Parameters:

limit - the property

Returns:

the value of the property

getLimitValueAsString

public String getLimitValueAsString(XMLSecurityManager.Limit limit)

Return the value of a property by its ordinal

Parameters:

limit - the property

Returns:

value of a property

getLimitValueByIndex

public String getLimitValueByIndex(int index)

Return the value of a property by its ordinal

Parameters:

index - the index of a property

Returns:

limit of a property as a string

getState

public XMLSecurityManager.State getState(XMLSecurityManager.Limit limit)

Return the state of the limit property

Parameters:

limit - the limit

Returns:

the state of the limit property

getStateLiteral

public String getStateLiteral(XMLSecurityManager.Limit limit)

Return the state of the limit property

Parameters:

limit - the limit

Returns:

the state of the limit property

getIndex

public int getIndex(String propertyName)

Get the index by property name

Parameters:

propertyName - property name

Returns:

the index of the property if found; return -1 if not

isNoLimit

public boolean isNoLimit(int limit)

Check if there's no limit defined by the Security Manager

Parameters:

limit -

Returns:

isOverLimit

public boolean isOverLimit(XMLSecurityManager.Limit limit,
                  String entityName,
                  int size,
                  XMLLimitAnalyzer limitAnalyzer)

Check if the size (length or count) of the specified limit property is over the limit

Parameters:

limit - the type of the limit property

entityName - the name of the entity

size - the size (count or length) of the entity

Returns:

true if the size is over the limit, false otherwise

isOverLimit

public boolean isOverLimit(int index,
                  String entityName,
                  int size,
                  XMLLimitAnalyzer limitAnalyzer)

Check if the value (length or count) of the specified limit property is over the limit

Parameters:

index - the index of the limit property

entityName - the name of the entity

size - the size (count or length) of the entity

Returns:

true if the size is over the limit, false otherwise

isOverLimit

public boolean isOverLimit(XMLSecurityManager.Limit limit,
                  XMLLimitAnalyzer limitAnalyzer)

Check against cumulated value

Parameters:

limit - the type of the limit property

size - the size (count or length) of the entity

Returns:

true if the size is over the limit, false otherwise

isOverLimit

public boolean isOverLimit(int index,
                  XMLLimitAnalyzer limitAnalyzer)

debugPrint

public void debugPrint(XMLLimitAnalyzer limitAnalyzer)

isSet

public boolean isSet(int index)

Indicate if a property is set explicitly

Parameters:

index -

Returns:

printEntityCountInfo

public boolean printEntityCountInfo()

convert

public static XMLSecurityManager convert(Object value,
                         XMLSecurityManager securityManager)

Convert a value set through setProperty to XMLSecurityManager. If the value is an instance of XMLSecurityManager, use it to override the default; If the value is an old SecurityManager, convert to the new XMLSecurityManager.

Parameters:

value - user specified security manager

securityManager - an instance of XMLSecurityManager

Returns:

an instance of the new security manager XMLSecurityManager