Class SecurityConfiguration

  • All Implemented Interfaces:
    XML11Configurable, org.apache.xerces.xni.parser.XMLComponentManager, org.apache.xerces.xni.parser.XMLParserConfiguration, org.apache.xerces.xni.parser.XMLPullParserConfiguration

    public class SecurityConfiguration
    extends XIncludeAwareParserConfiguration
    This configuration allows Xerces to behave in a security-conscious manner; that is, it permits applications to instruct Xerces to limit certain operations that could be exploited by malicious document authors to cause a denail-of-service attack when the document is parsed. In addition to the features and properties recognized by the base parser configuration, this class recognizes these additional features and properties:
    • Properties
      • http://apache.org/xml/properties/security-manager
    Version:
    $Id: SecurityConfiguration.java 699892 2008-09-28 21:08:27Z mrglavas $
    Author:
    Neil Graham, IBM
    • Field Detail

      • SECURITY_MANAGER_PROPERTY

        protected static final java.lang.String SECURITY_MANAGER_PROPERTY
        See Also:
        Constant Field Values
    • Constructor Detail

      • SecurityConfiguration

        public SecurityConfiguration()
        Default constructor.
      • SecurityConfiguration

        public SecurityConfiguration​(SymbolTable symbolTable)
        Constructs a parser configuration using the specified symbol table.
        Parameters:
        symbolTable - The symbol table to use.
      • SecurityConfiguration

        public SecurityConfiguration​(SymbolTable symbolTable,
                                     org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool)
        Constructs a parser configuration using the specified symbol table and grammar pool.

        REVISIT: Grammar pool will be updated when the new validation engine is implemented.

        Parameters:
        symbolTable - The symbol table to use.
        grammarPool - The grammar pool to use.
      • SecurityConfiguration

        public SecurityConfiguration​(SymbolTable symbolTable,
                                     org.apache.xerces.xni.grammars.XMLGrammarPool grammarPool,
                                     org.apache.xerces.xni.parser.XMLComponentManager parentSettings)
        Constructs a parser configuration using the specified symbol table, grammar pool, and parent settings.

        REVISIT: Grammar pool will be updated when the new validation engine is implemented.

        Parameters:
        symbolTable - The symbol table to use.
        grammarPool - The grammar pool to use.
        parentSettings - The parent settings.