org.apache.xerces.parsers
Class SecurityConfiguration

java.lang.Object
  |
  +--org.apache.xerces.util.ParserConfigurationSettings
        |
        +--org.apache.xerces.parsers.BasicParserConfiguration
              |
              +--org.apache.xerces.parsers.DTDConfiguration
                    |
                    +--org.apache.xerces.parsers.StandardParserConfiguration
                          |
                          +--org.apache.xerces.parsers.IntegratedParserConfiguration
                                |
                                +--org.apache.xerces.parsers.SecurityConfiguration
All Implemented Interfaces:
org.apache.xerces.xni.parser.XMLComponentManager, org.apache.xerces.xni.parser.XMLParserConfiguration, org.apache.xerces.xni.parser.XMLPullParserConfiguration

public class SecurityConfiguration
extends IntegratedParserConfiguration

This configuration allows Xerces to behave in a security-conscious manner; that is, it permits applications to instruct Xerces to limit certain operations that could be exploited by malicious document authors to cause a denail-of-service attack when the document is parsed. In addition to the features and properties recognized by the base parser configuration, this class recognizes these additional features and properties:

Version:
$Id: SecurityConfiguration.java,v 1.3 2003/01/23 19:39:13 neilg Exp $
Author:
Neil Graham, IBM

Field Summary
protected static java.lang.String SECURITY_MANAGER_PROPERTY
           
 
Fields inherited from class org.apache.xerces.parsers.IntegratedParserConfiguration
fNamespaceScanner, fNonNSDTDValidator, fNonNSScanner
 
Fields inherited from class org.apache.xerces.parsers.StandardParserConfiguration
fSchemaValidator, NORMALIZE_DATA, SCHEMA_AUGMENT_PSVI, SCHEMA_ELEMENT_DEFAULT, SCHEMA_LOCATION, SCHEMA_NONS_LOCATION, SCHEMA_VALIDATOR, XMLSCHEMA_FULL_CHECKING, XMLSCHEMA_VALIDATION
 
Fields inherited from class org.apache.xerces.parsers.DTDConfiguration
ALLOW_JAVA_ENCODINGS, CONTINUE_AFTER_FATAL_ERROR, DATATYPE_VALIDATOR_FACTORY, DOCUMENT_SCANNER, DTD_PROCESSOR, DTD_SCANNER, DTD_VALIDATOR, ENTITY_MANAGER, ERROR_REPORTER, fDatatypeValidatorFactory, fDTDProcessor, fDTDScanner, fDTDValidator, fEntityManager, fErrorReporter, fGrammarPool, fInputSource, fLocator, fNamespaceBinder, fParseInProgress, fScanner, fValidationManager, JAXP_SCHEMA_LANGUAGE, JAXP_SCHEMA_SOURCE, LOAD_EXTERNAL_DTD, NAMESPACE_BINDER, NOTIFY_BUILTIN_REFS, NOTIFY_CHAR_REFS, VALIDATION_MANAGER, WARN_ON_DUPLICATE_ATTDEF, WARN_ON_DUPLICATE_ENTITYDEF, WARN_ON_UNDECLARED_ELEMDEF, XMLGRAMMAR_POOL
 
Fields inherited from class org.apache.xerces.parsers.BasicParserConfiguration
ENTITY_RESOLVER, ERROR_HANDLER, EXTERNAL_GENERAL_ENTITIES, EXTERNAL_PARAMETER_ENTITIES, fComponents, fDocumentHandler, fDTDContentModelHandler, fDTDHandler, fLastComponent, fLocale, fSymbolTable, NAMESPACES, SYMBOL_TABLE, VALIDATION, XML_STRING
 
Fields inherited from class org.apache.xerces.util.ParserConfigurationSettings
fFeatures, fParentSettings, fProperties, fRecognizedFeatures, fRecognizedProperties
 
Constructor Summary
SecurityConfiguration()
          Default constructor.
SecurityConfiguration(SymbolTable symbolTable)
          Constructs a parser configuration using the specified symbol table.
SecurityConfiguration(SymbolTable symbolTable, org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool)
          Constructs a parser configuration using the specified symbol table and grammar pool.
SecurityConfiguration(SymbolTable symbolTable, org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool, org.apache.xerces.xni.parser.XMLComponentManager parentSettings)
          Constructs a parser configuration using the specified symbol table, grammar pool, and parent settings.
 
Methods inherited from class org.apache.xerces.parsers.IntegratedParserConfiguration
configurePipeline, createDocumentScanner, createDTDValidator
 
Methods inherited from class org.apache.xerces.parsers.StandardParserConfiguration
checkFeature, checkProperty
 
Methods inherited from class org.apache.xerces.parsers.DTDConfiguration
cleanup, createDatatypeValidatorFactory, createDTDProcessor, createDTDScanner, createEntityManager, createErrorReporter, createNamespaceBinder, createValidationManager, parse, parse, reset, setInputSource, setLocale
 
Methods inherited from class org.apache.xerces.parsers.BasicParserConfiguration
addComponent, getDocumentHandler, getDTDContentModelHandler, getDTDHandler, getEntityResolver, getErrorHandler, getLocale, setDocumentHandler, setDTDContentModelHandler, setDTDHandler, setEntityResolver, setErrorHandler, setFeature, setProperty
 
Methods inherited from class org.apache.xerces.util.ParserConfigurationSettings
addRecognizedFeatures, addRecognizedProperties, getFeature, getProperty
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 
Methods inherited from interface org.apache.xerces.xni.parser.XMLParserConfiguration
addRecognizedFeatures, addRecognizedProperties, getDocumentHandler, getDTDContentModelHandler, getDTDHandler, getEntityResolver, getErrorHandler, getFeature, getLocale, getProperty, setDocumentHandler, setDTDContentModelHandler, setDTDHandler, setEntityResolver, setErrorHandler, setFeature, setProperty
 

Field Detail

SECURITY_MANAGER_PROPERTY

protected static final java.lang.String SECURITY_MANAGER_PROPERTY
Constructor Detail

SecurityConfiguration

public SecurityConfiguration()
Default constructor.

SecurityConfiguration

public SecurityConfiguration(SymbolTable symbolTable)
Constructs a parser configuration using the specified symbol table.
Parameters:
symbolTable - The symbol table to use.

SecurityConfiguration

public SecurityConfiguration(SymbolTable symbolTable,
                             org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool)
Constructs a parser configuration using the specified symbol table and grammar pool.

REVISIT: Grammar pool will be updated when the new validation engine is implemented.

Parameters:
symbolTable - The symbol table to use.
grammarPool - The grammar pool to use.

SecurityConfiguration

public SecurityConfiguration(SymbolTable symbolTable,
                             org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool,
                             org.apache.xerces.xni.parser.XMLComponentManager parentSettings)
Constructs a parser configuration using the specified symbol table, grammar pool, and parent settings.

REVISIT: Grammar pool will be updated when the new validation engine is implemented.

Parameters:
symbolTable - The symbol table to use.
grammarPool - The grammar pool to use.
parentSettings - The parent settings.


Copyright © 1999-2003 Apache XML Project. All Rights Reserved.