|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Object | +--org.apache.xerces.util.ParserConfigurationSettings | +--org.apache.xerces.parsers.BasicParserConfiguration | +--org.apache.xerces.parsers.DTDConfiguration | +--org.apache.xerces.parsers.StandardParserConfiguration | +--org.apache.xerces.parsers.IntegratedParserConfiguration | +--org.apache.xerces.parsers.SecurityConfiguration
This configuration allows Xerces to behave in a security-conscious manner; that is, it permits applications to instruct Xerces to limit certain operations that could be exploited by malicious document authors to cause a denail-of-service attack when the document is parsed. In addition to the features and properties recognized by the base parser configuration, this class recognizes these additional features and properties:
Field Summary | |
---|---|
protected static java.lang.String |
SECURITY_MANAGER_PROPERTY
|
Fields inherited from class org.apache.xerces.parsers.IntegratedParserConfiguration |
---|
fNamespaceScanner, fNonNSDTDValidator, fNonNSScanner |
Fields inherited from class org.apache.xerces.parsers.StandardParserConfiguration |
---|
fSchemaValidator, NORMALIZE_DATA, SCHEMA_AUGMENT_PSVI, SCHEMA_ELEMENT_DEFAULT, SCHEMA_LOCATION, SCHEMA_NONS_LOCATION, SCHEMA_VALIDATOR, XMLSCHEMA_FULL_CHECKING, XMLSCHEMA_VALIDATION |
Fields inherited from class org.apache.xerces.parsers.BasicParserConfiguration |
---|
ENTITY_RESOLVER, ERROR_HANDLER, EXTERNAL_GENERAL_ENTITIES, EXTERNAL_PARAMETER_ENTITIES, fComponents, fDocumentHandler, fDTDContentModelHandler, fDTDHandler, fLastComponent, fLocale, fSymbolTable, NAMESPACES, SYMBOL_TABLE, VALIDATION, XML_STRING |
Fields inherited from class org.apache.xerces.util.ParserConfigurationSettings |
---|
fFeatures, fParentSettings, fProperties, fRecognizedFeatures, fRecognizedProperties |
Constructor Summary | |
---|---|
SecurityConfiguration()
Default constructor. |
|
SecurityConfiguration(SymbolTable symbolTable)
Constructs a parser configuration using the specified symbol table. |
|
SecurityConfiguration(SymbolTable symbolTable,
org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool)
Constructs a parser configuration using the specified symbol table and grammar pool. |
|
SecurityConfiguration(SymbolTable symbolTable,
org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool,
org.apache.xerces.xni.parser.XMLComponentManager parentSettings)
Constructs a parser configuration using the specified symbol table, grammar pool, and parent settings. |
Methods inherited from class org.apache.xerces.parsers.IntegratedParserConfiguration |
---|
configurePipeline, createDocumentScanner, createDTDValidator |
Methods inherited from class org.apache.xerces.parsers.StandardParserConfiguration |
---|
checkFeature, checkProperty |
Methods inherited from class org.apache.xerces.parsers.DTDConfiguration |
---|
cleanup, createDatatypeValidatorFactory, createDTDProcessor, createDTDScanner, createEntityManager, createErrorReporter, createNamespaceBinder, createValidationManager, parse, parse, reset, setInputSource, setLocale |
Methods inherited from class org.apache.xerces.parsers.BasicParserConfiguration |
---|
addComponent, getDocumentHandler, getDTDContentModelHandler, getDTDHandler, getEntityResolver, getErrorHandler, getLocale, setDocumentHandler, setDTDContentModelHandler, setDTDHandler, setEntityResolver, setErrorHandler, setFeature, setProperty |
Methods inherited from class org.apache.xerces.util.ParserConfigurationSettings |
---|
addRecognizedFeatures, addRecognizedProperties, getFeature, getProperty |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Methods inherited from interface org.apache.xerces.xni.parser.XMLParserConfiguration |
---|
addRecognizedFeatures, addRecognizedProperties, getDocumentHandler, getDTDContentModelHandler, getDTDHandler, getEntityResolver, getErrorHandler, getFeature, getLocale, getProperty, setDocumentHandler, setDTDContentModelHandler, setDTDHandler, setEntityResolver, setErrorHandler, setFeature, setProperty |
Field Detail |
protected static final java.lang.String SECURITY_MANAGER_PROPERTY
Constructor Detail |
public SecurityConfiguration()
public SecurityConfiguration(SymbolTable symbolTable)
symbolTable
- The symbol table to use.public SecurityConfiguration(SymbolTable symbolTable, org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool)
REVISIT: Grammar pool will be updated when the new validation engine is implemented.
symbolTable
- The symbol table to use.grammarPool
- The grammar pool to use.public SecurityConfiguration(SymbolTable symbolTable, org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool, org.apache.xerces.xni.parser.XMLComponentManager parentSettings)
REVISIT: Grammar pool will be updated when the new validation engine is implemented.
symbolTable
- The symbol table to use.grammarPool
- The grammar pool to use.parentSettings
- The parent settings.
|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |