org.xwiki.velocity.introspection
Class SecureIntrospector

java.lang.Object
  org.apache.velocity.util.introspection.IntrospectorBase
      org.apache.velocity.util.introspection.Introspector
          org.apache.velocity.util.introspection.SecureIntrospectorImpl
              org.xwiki.velocity.introspection.SecureIntrospector

All Implemented Interfaces:

org.apache.velocity.util.introspection.SecureIntrospectorControl

public class SecureIntrospector
extends org.apache.velocity.util.introspection.SecureIntrospectorImpl

SecureIntrospectorImpl is way too restrictive with allowed Class methods.

Since:

5.4RC1

Version:

$Id: 8a1a7a72eb0b0f42a6487ae41279f04869e1e299 $

Field Summary

Fields inherited from class org.apache.velocity.util.introspection.IntrospectorBase

log

Constructor Summary

SecureIntrospector(String[] badClasses, String[] badPackages, org.apache.velocity.runtime.log.Log log)

Method Summary

boolean

checkObjectExecutePermission(Class clazz, String methodName)

Methods inherited from class org.apache.velocity.util.introspection.SecureIntrospectorImpl

getMethod

Methods inherited from class org.apache.velocity.util.introspection.IntrospectorBase

getIntrospectorCache

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecureIntrospector

public SecureIntrospector(String[] badClasses,
                          String[] badPackages,
                          org.apache.velocity.runtime.log.Log log)

Parameters:

badClasses - forbidden classes

badPackages - forbidden packages

log - the log

Method Detail

checkObjectExecutePermission

public boolean checkObjectExecutePermission(Class clazz,
                                            String methodName)

Specified by:

checkObjectExecutePermission in interface org.apache.velocity.util.introspection.SecureIntrospectorControl

Overrides:

checkObjectExecutePermission in class org.apache.velocity.util.introspection.SecureIntrospectorImpl