Java Doc for SecureIntrospectorImpl.java in » Template-Engine » Velocity » org » apache » velocity » util » introspection » Java Source Code / Java DocumentationJava Source Code and Java Documentation

Java Source Code / Java Documentation

1.	6.0 JDK Core
2.	6.0 JDK Modules
3.	6.0 JDK Modules com.sun
4.	6.0 JDK Modules com.sun.java
5.	6.0 JDK Modules sun
6.	6.0 JDK Platform
7.	Ajax
8.	Apache Harmony Java SE
9.	Aspect oriented
10.	Authentication Authorization
11.	Blogger System
12.	Build
13.	Byte Code
14.	Cache
15.	Chart
16.	Chat
17.	Code Analyzer
18.	Collaboration
19.	Content Management System
20.	Database Client
21.	Database DBMS
22.	Database JDBC Connection Pool
23.	Database ORM
24.	Development
25.	EJB Server geronimo
26.	EJB Server GlassFish
27.	EJB Server JBoss 4.2.1
28.	EJB Server resin 3.1.5
29.	ERP CRM Financial
30.	ESB
31.	Forum
32.	GIS
33.	Graphic Library
34.	Groupware
35.	HTML Parser
36.	IDE
37.	IDE Eclipse
38.	IDE Netbeans
39.	Installer
40.	Internationalization Localization
41.	Inversion of Control
42.	Issue Tracking
43.	J2EE
44.	JBoss
45.	JMS
46.	JMX
47.	Library
48.	Mail Clients
49.	Net
50.	Parser
51.	PDF
52.	Portal
53.	Profiler
54.	Project Management
55.	Report
56.	RSS RDF
57.	Rule Engine
58.	Science
59.	Scripting
60.	Search Engine
61.	Security
62.	Sevlet Container
63.	Source Control
64.	Swing Library
65.	Template Engine
66.	Test Coverage
67.	Testing
68.	UML
69.	Web Crawler
70.	Web Framework
71.	Web Mail
72.	Web Server
73.	Web Services
74.	Web Services apache cxf 2.0.1
75.	Web Services AXIS2
76.	Wiki Engine
77.	Workflow Engines
78.	XML
79.	XML UI

Java

Java Tutorial

Illustrator Tutorials

GIMP Tutorials

C# / C Sharp

C# / CSharp Tutorial

C# / CSharp Open Source

SQL Server / T-SQL Tutorial

Oracle PL / SQL

Oracle PL/SQL Tutorial

Flash / Flex / ActionScript

VBA / Excel / Access / Word

XML

XML Tutorial

Microsoft Office PowerPoint 2007 Tutorial

Microsoft Office Excel 2007 Tutorial

Microsoft Office Word 2007 Tutorial

Java Source Code / Java Documentation » Template Engine » Velocity » org.apache.velocity.util.introspection

Source Cross Reference Class Diagram Java Document (Java Doc)

java.lang .Object

org.apache.velocity.util.introspection .IntrospectorBase

org.apache.velocity.util.introspection .Introspector

org.apache.velocity.util.introspection .SecureIntrospectorImpl

SecureIntrospectorImpl

public class SecureIntrospectorImpl extends Introspector implements SecureIntrospectorControl(Code)

Prevent "dangerous" classloader/reflection related calls. Use this introspector for situations in which template writers are numerous or untrusted. Specifically, this introspector prevents creation of arbitrary objects and prevents reflection on objects.

See documentation of checkObjectExecutePermission() for more information on specific classes and methods blocked.
author:
Will Glass-Husain
version:
$Id: SecureIntrospectorImpl.java 509906 2007-02-21 06:11:05Z wglass $

Constructor Summary
public	SecureIntrospectorImpl(String[] badClasses, String[] badPackages, Log log)

Method Summary
public boolean	checkObjectExecutePermission(Class clazz, String methodName) Determine which methods and classes to prevent from executing.
public Method	getMethod(Class clazz, String methodName, Object[] params) Get the Method object corresponding to the given class, name and parameters.

Constructor Detail

SecureIntrospectorImpl
public SecureIntrospectorImpl(String[] badClasses, String[] badPackages, Log log)(Code)

Method Detail

checkObjectExecutePermission
public boolean checkObjectExecutePermission(Class clazz, String methodName)(Code)
	Determine which methods and classes to prevent from executing. Always blocks methods wait() and notify(). Always allows methods on Number, Boolean, and String. Prohibits method calls on classes related to reflection and system operations. For the complete list, see the properties `introspector.restrict.classes` and `introspector.restrict.packages`. Parameters: clazz - Class on which method will be called Parameters: methodName - Name of method to be called See Also: org.apache.velocity.util.introspection.SecureIntrospectorControl.checkObjectExecutePermission(java.lang.Classjava.lang.String)

getMethod
public Method getMethod(Class clazz, String methodName, Object[] params) throws IllegalArgumentException(Code)
	Get the Method object corresponding to the given class, name and parameters. Will check for appropriate execute permissions and return null if the method is not allowed to be executed. Parameters: clazz - Class on which method will be called Parameters: methodName - Name of method to be called Parameters: params - array of parameters to method Method object retrieved by Introspector throws: IllegalArgumentException - The parameter passed in were incorrect.

Fields inherited from org.apache.velocity.util.introspection.Introspector

final public static String CACHEDUMP_MSG(Code)(Java Doc)

Methods inherited from org.apache.velocity.util.introspection.Introspector

public Method getMethod(Class c, String name, Object[] params) throws IllegalArgumentException(Code)(Java Doc)
public void triggerClear()(Code)(Java Doc)

Fields inherited from org.apache.velocity.util.introspection.IntrospectorBase

final protected Log log(Code)(Java Doc)

Methods inherited from org.apache.velocity.util.introspection.IntrospectorBase

protected void clearCache()(Code)(Java Doc)
protected ClassMap createClassMap(Class c)(Code)(Java Doc)
protected IntrospectorCache getIntrospectorCache()(Code)(Java Doc)
public Method getMethod(Class c, String name, Object[] params) throws IllegalArgumentException, MethodMap.AmbiguousException(Code)(Java Doc)
protected ClassMap lookupClassMap(Class c)(Code)(Java Doc)
public void triggerClear()(Code)(Java Doc)
public void triggerGet(Class c, ClassMap classMap)(Code)(Java Doc)
public void triggerPut(Class c, ClassMap classMap)(Code)(Java Doc)

Methods inherited from java.lang.Object

native protected Object clone() throws CloneNotSupportedException(Code)(Java Doc)
public boolean equals(Object obj)(Code)(Java Doc)
protected void finalize() throws Throwable(Code)(Java Doc)
final native public Class getClass()(Code)(Java Doc)
native public int hashCode()(Code)(Java Doc)
final native public void notify()(Code)(Java Doc)
final native public void notifyAll()(Code)(Java Doc)
public String toString()(Code)(Java Doc)
final native public void wait(long timeout) throws InterruptedException(Code)(Java Doc)
final public void wait(long timeout, int nanos) throws InterruptedException(Code)(Java Doc)
final public void wait() throws InterruptedException(Code)(Java Doc)

www.java2java.com | Contact Us

All other trademarks are property of their respective owners.