com.google.gdata.util.common.xml.parsing

Class SecureGenericXMLFactory.SecureDocumentBuilderFactory

java.lang.Object

javax.xml.parsers.DocumentBuilderFactory

com.google.gdata.util.common.xml.parsing.SecureGenericXMLFactory.SecureDocumentBuilderFactory

Enclosing class:

SecureGenericXMLFactory

protected static class SecureGenericXMLFactory.SecureDocumentBuilderFactory
extends DocumentBuilderFactory

Wraps an existing DocumentBuilderFactory and ensures that any returned DocumentBuilder instances are secure.

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	SecureGenericXMLFactory.SecureDocumentBuilderFactory(DocumentBuilderFactory factory) Constructs a new SecureDocumentBuilderFactory instance that delegates most functionality to an existing instance, but overrides where needed to protect against XXE attacks.

Method Summary

Methods

Modifier and Type	Method and Description
Object	getAttribute(String name)
boolean	getFeature(String name)
Schema	getSchema()
boolean	isCoalescing()
boolean	isExpandEntityReferences()
boolean	isIgnoringComments()
boolean	isIgnoringElementContentWhitespace()
boolean	isIncludeAware()
boolean	isNamespaceAware()
boolean	isValidating()
DocumentBuilder	newDocumentBuilder()
void	setAttribute(String name, Object value)
void	setCoalescing(boolean coalescing)
void	setExpandEntityReferences(boolean expandEntityRef)
void	setFeature(String name, boolean value)
void	setIgnoringComments(boolean ignoreComments)
void	setIgnoringElementContentWhitespace(boolean whitespace)
void	setNamespaceAware(boolean awareness)
void	setSchema(Schema schema)
void	setValidating(boolean validating)
void	setXIncludeAware(boolean state)

Methods inherited from class javax.xml.parsers.DocumentBuilderFactory

isXIncludeAware, newInstance, newInstance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecureGenericXMLFactory.SecureDocumentBuilderFactory

protected SecureGenericXMLFactory.SecureDocumentBuilderFactory(DocumentBuilderFactory factory)

Constructs a new SecureDocumentBuilderFactory instance that delegates most functionality to an existing instance, but overrides where needed to protect against XXE attacks.

Parameters:

factory - the existing DocumentBuilderFactory that should be secured.

Method Detail

newDocumentBuilder

public DocumentBuilder newDocumentBuilder()
                                   throws ParserConfigurationException

Specified by:

newDocumentBuilder in class DocumentBuilderFactory

Throws:

ParserConfigurationException

setNamespaceAware

public void setNamespaceAware(boolean awareness)

Overrides:

setNamespaceAware in class DocumentBuilderFactory

setValidating

public void setValidating(boolean validating)

Overrides:

setValidating in class DocumentBuilderFactory

setIgnoringElementContentWhitespace

public void setIgnoringElementContentWhitespace(boolean whitespace)

Overrides:

setIgnoringElementContentWhitespace in class DocumentBuilderFactory

setExpandEntityReferences

public void setExpandEntityReferences(boolean expandEntityRef)

Overrides:

setExpandEntityReferences in class DocumentBuilderFactory

setIgnoringComments

public void setIgnoringComments(boolean ignoreComments)

Overrides:

setIgnoringComments in class DocumentBuilderFactory

setCoalescing

public void setCoalescing(boolean coalescing)

Overrides:

setCoalescing in class DocumentBuilderFactory

isNamespaceAware

public boolean isNamespaceAware()

Overrides:

isNamespaceAware in class DocumentBuilderFactory

isValidating

public boolean isValidating()

Overrides:

isValidating in class DocumentBuilderFactory

isIgnoringElementContentWhitespace

public boolean isIgnoringElementContentWhitespace()

Overrides:

isIgnoringElementContentWhitespace in class DocumentBuilderFactory

isExpandEntityReferences

public boolean isExpandEntityReferences()

Overrides:

isExpandEntityReferences in class DocumentBuilderFactory

isIgnoringComments

public boolean isIgnoringComments()

Overrides:

isIgnoringComments in class DocumentBuilderFactory

isCoalescing

public boolean isCoalescing()

Overrides:

isCoalescing in class DocumentBuilderFactory

setAttribute

public void setAttribute(String name,
                Object value)
                  throws IllegalArgumentException

Specified by:

setAttribute in class DocumentBuilderFactory

Throws:

IllegalArgumentException

getAttribute

public Object getAttribute(String name)
                    throws IllegalArgumentException

Specified by:

getAttribute in class DocumentBuilderFactory

Throws:

IllegalArgumentException

setFeature

public void setFeature(String name,
              boolean value)
                throws ParserConfigurationException

Specified by:

setFeature in class DocumentBuilderFactory

Throws:

ParserConfigurationException

getFeature

public boolean getFeature(String name)
                   throws ParserConfigurationException

Specified by:

getFeature in class DocumentBuilderFactory

Throws:

ParserConfigurationException

getSchema

public Schema getSchema()
                 throws UnsupportedOperationException

Overrides:

getSchema in class DocumentBuilderFactory

Throws:

UnsupportedOperationException

setSchema

public void setSchema(Schema schema)
               throws UnsupportedOperationException

Overrides:

setSchema in class DocumentBuilderFactory

Throws:

UnsupportedOperationException

setXIncludeAware

public void setXIncludeAware(boolean state)
                      throws UnsupportedOperationException

Overrides:

setXIncludeAware in class DocumentBuilderFactory

Throws:

UnsupportedOperationException

isIncludeAware

public boolean isIncludeAware()
                       throws UnsupportedOperationException

Throws:

UnsupportedOperationException