| java.lang.Object
 org.apache.velocity.util.introspection.UberspectImpl
org.apache.velocity.util.introspection.SecureUberspector
| SecureUberspector | | public class SecureUberspector extends UberspectImpl implements RuntimeServicesAware(Code) | | Use a custom introspector that prevents classloader related method
calls. Use this introspector for situations in which template
writers are numerous or untrusted. Specifically, this introspector
prevents creation of arbitrary objects or reflection on objects.
To use this introspector, set the following property:
runtime.introspector.uberspect = org.apache.velocity.util.introspection.SecureUberspector
author:
Will Glass-Husain
version:
$Id: SecureUberspector.java 470261 2006-11-02 07:32:37Z wglass $ |
| SecureUberspector | | public SecureUberspector()(Code) | | |
| getIterator | | public Iterator getIterator(Object obj, Info i) throws Exception(Code) | | Get an iterator from the given object. Since the superclass method
this secure version checks for execute permission.
Parameters:
obj - object to iterate over
Parameters:
i - line, column, template info Iterator for object
throws:
Exception - |
| init | | public void init()(Code) | | init - generates the Introspector. As the setup code
makes sure that the log gets set before this is called,
we can initialize the Introspector using the log object.
|
| setRuntimeServices | | public void setRuntimeServices(RuntimeServices rs)(Code) | | Store the RuntimeServices before the object is initialized..
Parameters:
rs - RuntimeServices object for initialization |
|
|