com.google.gdata.util.common.xml.parsing

Class SecureGenericXMLFactory.SecureSAXParserFactory

java.lang.Object

javax.xml.parsers.SAXParserFactory

com.google.gdata.util.common.xml.parsing.SecureGenericXMLFactory.SecureSAXParserFactory

Enclosing class:

SecureGenericXMLFactory

protected static class SecureGenericXMLFactory.SecureSAXParserFactory
extends SAXParserFactory

Wraps an existing SAXParserFactory and ensures that any returned SAXParser instances are secure.

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	SecureGenericXMLFactory.SecureSAXParserFactory(SAXParserFactory factory) Constructs a new SecureSAXParserFactory instance that delegates most functionality to an existing instance, but overrides where needed to protect against XXE attacks.

Method Summary

Methods

Modifier and Type	Method and Description
boolean	getFeature(String name)
Schema	getSchema()
boolean	isNamespaceAware()
boolean	isValidating()
boolean	isXIncludeAware()
SAXParser	newSAXParser()
void	setFeature(String name, boolean value)
void	setNamespaceAware(boolean awareness)
void	setSchema(Schema schema)
void	setValidating(boolean validating)
void	setXIncludeAware(boolean state)

Methods inherited from class javax.xml.parsers.SAXParserFactory

newInstance, newInstance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecureGenericXMLFactory.SecureSAXParserFactory

protected SecureGenericXMLFactory.SecureSAXParserFactory(SAXParserFactory factory)
                                                  throws ParserConfigurationException,
                                                         SAXException

Constructs a new SecureSAXParserFactory instance that delegates most functionality to an existing instance, but overrides where needed to protect against XXE attacks.

Parameters:

factory - the existing SAXParserFactory that should be secured.

Throws:

ParserConfigurationException - on configuration errors.

SAXException - on configuration failures.

Method Detail

newSAXParser

public SAXParser newSAXParser()
                       throws ParserConfigurationException,
                              SAXException

Specified by:

newSAXParser in class SAXParserFactory

Throws:

ParserConfigurationException

SAXException

setNamespaceAware

public void setNamespaceAware(boolean awareness)

Overrides:

setNamespaceAware in class SAXParserFactory

setValidating

public void setValidating(boolean validating)

Overrides:

setValidating in class SAXParserFactory

isNamespaceAware

public boolean isNamespaceAware()

Overrides:

isNamespaceAware in class SAXParserFactory

isValidating

public boolean isValidating()

Overrides:

isValidating in class SAXParserFactory

setFeature

public void setFeature(String name,
              boolean value)
                throws ParserConfigurationException,
                       SAXNotRecognizedException,
                       SAXNotSupportedException

Specified by:

setFeature in class SAXParserFactory

Throws:

ParserConfigurationException

SAXNotRecognizedException

SAXNotSupportedException

getFeature

public boolean getFeature(String name)
                   throws ParserConfigurationException,
                          SAXNotRecognizedException,
                          SAXNotSupportedException

Specified by:

getFeature in class SAXParserFactory

Throws:

ParserConfigurationException

SAXNotRecognizedException

SAXNotSupportedException

getSchema

public Schema getSchema()
                 throws UnsupportedOperationException

Overrides:

getSchema in class SAXParserFactory

Throws:

UnsupportedOperationException

setSchema

public void setSchema(Schema schema)
               throws UnsupportedOperationException

Overrides:

setSchema in class SAXParserFactory

Throws:

UnsupportedOperationException

setXIncludeAware

public void setXIncludeAware(boolean state)
                      throws UnsupportedOperationException

Overrides:

setXIncludeAware in class SAXParserFactory

Throws:

UnsupportedOperationException

isXIncludeAware

public boolean isXIncludeAware()
                        throws UnsupportedOperationException

Overrides:

isXIncludeAware in class SAXParserFactory

Throws:

UnsupportedOperationException