SecurityConfiguration

Class Overview

This configuration allows Xerces to behave in a security-conscious manner; that is, it permits applications to instruct Xerces to limit certain operations that could be exploited by malicious document authors to cause a denail-of-service attack when the document is parsed. In addition to the features and properties recognized by the base parser configuration, this class recognizes these additional features and properties:

• Properties
  • http://apache.org/xml/properties/security-manager

Summary

[Expand] Inherited Constants
From class org.apache.xerces.parsers.XIncludeAwareParserConfiguration String ALLOW_UE_AND_NOTATION_EVENTS Feature identifier: allow notation and unparsed entity events to be sent out of order. String NAMESPACE_CONTEXT Property identifier: error reporter. String XINCLUDE_FEATURE Feature identifier: XInclude processing String XINCLUDE_FIXUP_BASE_URIS Feature identifier: fixup base URIs. String XINCLUDE_FIXUP_LANGUAGE Feature identifier: fixup language. String XINCLUDE_HANDLER Property identifier: error reporter.
From class org.apache.xerces.parsers.XML11Configuration String ALLOW_JAVA_ENCODINGS Feature identifier: allow Java encodings. String CONTINUE_AFTER_FATAL_ERROR Feature identifier: continue after fatal error. String DATATYPE_VALIDATOR_FACTORY Property identifier: datatype validator factory. String DOCUMENT_SCANNER Property identifier document scanner: String DTD_PROCESSOR Property identifier: DTD loader. String DTD_SCANNER Property identifier: DTD scanner. String DTD_VALIDATOR Property identifier: DTD validator. String ENTITY_MANAGER Property identifier: entity manager. String ENTITY_RESOLVER Property identifier: entity resolver. String ERROR_HANDLER Property identifier: error handler. String ERROR_REPORTER Property identifier: error reporter. String EXTERNAL_GENERAL_ENTITIES Feature identifier: external general entities. String EXTERNAL_PARAMETER_ENTITIES Feature identifier: external parameter entities. String GENERATE_SYNTHETIC_ANNOTATIONS Feature: generate synthetic annotations String HONOUR_ALL_SCHEMALOCATIONS Feature identifier: honour all schemaLocations String IDENTITY_CONSTRAINT_CHECKING Feature identifier: whether to ignore identity constraint errors String ID_IDREF_CHECKING Feature identifier: whether to ignore ID/IDREF errors String IGNORE_XSI_TYPE Feature identifier: whether to ignore xsi:type attributes until a global element declaration is encountered String JAXP_SCHEMA_LANGUAGE Property identifier: JAXP schema language / DOM schema-type. String JAXP_SCHEMA_SOURCE Property identifier: JAXP schema source/ DOM schema-location. String LOAD_EXTERNAL_DTD Feature identifier: load external DTD. String NAMESPACES Feature identifier: namespaces. String NAMESPACE_BINDER Property identifier: namespace binder. String NORMALIZE_DATA Feature identifier: expose schema normalized value String NOTIFY_BUILTIN_REFS Feature identifier: notify built-in refereces. String NOTIFY_CHAR_REFS Feature identifier: notify character refereces. boolean PRINT_EXCEPTION_STACK_TRACE Set to true and recompile to print exception stack trace. String ROOT_TYPE_DEF Property identifier: root type definition. String SCHEMA_AUGMENT_PSVI Feature identifier: augment PSVI String SCHEMA_ELEMENT_DEFAULT Feature identifier: send element default value via characters() String SCHEMA_LOCATION Property identifier: schema location. String SCHEMA_NONS_LOCATION Property identifier: no namespace schema location. String SCHEMA_VALIDATOR Property identifier: XML Schema validator. String SYMBOL_TABLE Property identifier: symbol table. String UNPARSED_ENTITY_CHECKING Feature identifier: whether to ignore unparsed entity errors String USE_GRAMMAR_POOL_ONLY Feature identifier: use grammar pool only String VALIDATE_ANNOTATIONS Feature identifier: validate annotations String VALIDATION Feature identifier: validation. String VALIDATION_MANAGER String WARN_ON_DUPLICATE_ATTDEF Feature identifier: warn on duplicate attribute definition. String WARN_ON_DUPLICATE_ENTITYDEF Feature identifier: warn on duplicate entity definition. String WARN_ON_UNDECLARED_ELEMDEF Feature identifier: warn on undeclared element definition. String XML11_DATATYPE_VALIDATOR_FACTORY String XMLGRAMMAR_POOL Property identifier: grammar pool. String XMLSCHEMA_FULL_CHECKING feature identifier: XML Schema validation -- full checking String XMLSCHEMA_VALIDATION feature identifier: XML Schema validation String XML_STRING Property identifier: xml string.
From class org.apache.xerces.util.ParserConfigurationSettings String PARSER_SETTINGS

[Expand] Inherited Fields
From class org.apache.xerces.parsers.XIncludeAwareParserConfiguration protected NamespaceContext fCurrentNSContext Current NamespaceContext. protected NamespaceSupport fNonXIncludeNSContext Non-XInclude NamespaceContext. protected boolean fXIncludeEnabled Flag indicating whether XInclude processsing is enabled. protected XIncludeHandler fXIncludeHandler XInclude handler. protected XIncludeNamespaceSupport fXIncludeNSContext XInclude NamespaceContext.
From class org.apache.xerces.parsers.XML11Configuration protected ArrayList fCommonComponents Common components: XMLEntityManager, XMLErrorReporter, XMLSchemaValidator protected ArrayList fComponents XML 1.0 Components. protected boolean fConfigUpdated fConfigUpdated is set to true if there has been any change to the configuration settings, i.e a feature or a property was changed. protected XMLDTDScanner fCurrentDTDScanner Current DTD scanner. protected DTDDVFactory fCurrentDVFactory Current Datatype validator factory. protected XMLDocumentScanner fCurrentScanner Current scanner protected XMLDTDContentModelHandler fDTDContentModelHandler The DTD content model handler. protected XMLDTDHandler fDTDHandler The DTD handler. protected XMLDTDProcessor fDTDProcessor The XML 1.0 DTD Processor . protected XMLDTDScanner fDTDScanner The XML 1.0 DTD scanner. protected XMLDTDValidator fDTDValidator The XML 1.0 DTD Validator: binds namespaces protected DTDDVFactory fDatatypeValidatorFactory The XML 1.0 Datatype validator factory. protected XMLDocumentHandler fDocumentHandler The document handler. protected XMLEntityManager fEntityManager Entity manager. protected XMLErrorReporter fErrorReporter Error reporter. protected XMLGrammarPool fGrammarPool Grammar pool. protected XMLInputSource fInputSource protected XMLDocumentSource fLastComponent Last component in the document pipeline protected Locale fLocale protected XMLLocator fLocator protected XMLNSDocumentScannerImpl fNamespaceScanner The XML 1.0 Document scanner that does namespace binding. protected XMLDTDValidator fNonNSDTDValidator The XML 1.0 DTD Validator that does not bind namespaces protected XMLDocumentScannerImpl fNonNSScanner The XML 1.0 Non-namespace implementation of scanner protected boolean fParseInProgress True if a parse is in progress. protected XMLSchemaValidator fSchemaValidator XML Schema Validator. protected SymbolTable fSymbolTable protected ValidationManager fValidationManager protected XMLVersionDetector fVersionDetector protected ArrayList fXML11Components XML 1.1. protected XML11DTDProcessor fXML11DTDProcessor The XML 1.1 DTD processor. protected XML11DTDScannerImpl fXML11DTDScanner The XML 1.1 DTD scanner. protected XML11DTDValidator fXML11DTDValidator The XML 1.1 DTD validator that does not do namespace binding. protected DTDDVFactory fXML11DatatypeFactory The XML 1.1 datatype factory. protected XML11DocumentScannerImpl fXML11DocScanner The XML 1.1 document scanner that does not do namespace binding. protected XML11NSDTDValidator fXML11NSDTDValidator The XML 1.1 DTD validator that does namespace binding. protected XML11NSDocumentScannerImpl fXML11NSDocScanner The XML 1.1 document scanner that does namespace binding.
From class org.apache.xerces.util.ParserConfigurationSettings protected HashMap fFeatures Features. protected XMLComponentManager fParentSettings Parent parser configuration settings. protected HashMap fProperties Properties. protected ArrayList fRecognizedFeatures Recognized features. protected ArrayList fRecognizedProperties Recognized properties.

[Expand] Inherited Methods
From class org.apache.xerces.parsers.XIncludeAwareParserConfiguration void configurePipeline() Configures the pipeline. void configureXML11Pipeline() Configures the XML 1.1 pipeline. boolean getFeature(String featureId) Returns the state of a feature. void setFeature(String featureId, boolean state) Set the state of a feature.
From class org.apache.xerces.parsers.XML11Configuration void addCommonComponent(XMLComponent component) Adds common component to the parser configuration. void addComponent(XMLComponent component) Adds a component to the parser configuration. void addRecognizedParamsAndSetDefaults(XMLComponent component) Adds all of the component's recognized features and properties to the list of default recognized features and properties, and sets default values on the configuration for features and properties which were previously absent from the configuration. void addXML11Component(XMLComponent component) Adds an XML 1.1 component to the parser configuration. void checkFeature(String featureId) Check a feature. void checkProperty(String propertyId) Check a property. void cleanup() If the application decides to terminate parsing before the xml document is fully parsed, the application should call this method to free any resource allocated during parsing. void configurePipeline() Configures the pipeline. void configureXML11Pipeline() Configures the XML 1.1 pipeline. XMLDTDContentModelHandler getDTDContentModelHandler() Returns the registered DTD content model handler. XMLDTDHandler getDTDHandler() Returns the registered DTD handler. XMLDocumentHandler getDocumentHandler() Returns the registered document handler. XMLEntityResolver getEntityResolver() Return the current entity resolver. XMLErrorHandler getErrorHandler() Return the current error handler. boolean getFeature(String featureId) Returns the state of a feature. Locale getLocale() Returns the locale. boolean parse(boolean complete) Parses the document in a pull parsing fashion. void parse(XMLInputSource source) Parses the specified input source. void reset() reset all XML 1.0 components before parsing and namespace context void resetCommon() reset all common components before parsing void resetXML11() reset all components before parsing and namespace context void setDTDContentModelHandler(XMLDTDContentModelHandler handler) Sets the DTD content model handler. void setDTDHandler(XMLDTDHandler dtdHandler) Sets the DTD handler. void setDocumentHandler(XMLDocumentHandler documentHandler) Sets the document handler on the last component in the pipeline to receive information about the document. void setEntityResolver(XMLEntityResolver resolver) Sets the resolver used to resolve external entities. void setErrorHandler(XMLErrorHandler errorHandler) Allow an application to register an error event handler. void setFeature(String featureId, boolean state) Set the state of a feature. void setInputSource(XMLInputSource inputSource) Sets the input source for the document to parse. void setLocale(Locale locale) Set the locale to use for messages. void setProperty(String propertyId, Object value) setProperty
From class org.apache.xerces.util.ParserConfigurationSettings void addRecognizedFeatures(String[] featureIds) Allows a parser to add parser specific features to be recognized and managed by the parser configuration. void addRecognizedProperties(String[] propertyIds) Allows a parser to add parser specific properties to be recognized and managed by the parser configuration. void checkFeature(String featureId) Check a feature. void checkProperty(String propertyId) Check a property. boolean getFeature(String featureId) Returns the state of a feature. Object getProperty(String propertyId) Returns the value of a property. void setFeature(String featureId, boolean state) Set the state of a feature. void setProperty(String propertyId, Object value) setProperty
From class java.lang.Object Object clone() boolean equals(Object arg0) void finalize() final Class<?> getClass() int hashCode() final void notify() final void notifyAll() String toString() final void wait() final void wait(long arg0, int arg1) final void wait(long arg0)
From interface org.apache.xerces.xni.parser.XMLComponentManager abstract boolean getFeature(String featureId) Returns the state of a feature. abstract Object getProperty(String propertyId) Returns the value of a property.
From interface org.apache.xerces.xni.parser.XMLParserConfiguration abstract void addRecognizedFeatures(String[] featureIds) Allows a parser to add parser specific features to be recognized and managed by the parser configuration. abstract void addRecognizedProperties(String[] propertyIds) Allows a parser to add parser specific properties to be recognized and managed by the parser configuration. abstract XMLDTDContentModelHandler getDTDContentModelHandler() Returns the registered DTD content model handler. abstract XMLDTDHandler getDTDHandler() Returns the registered DTD handler. abstract XMLDocumentHandler getDocumentHandler() Returns the registered document handler. abstract XMLEntityResolver getEntityResolver() Returns the registered entity resolver. abstract XMLErrorHandler getErrorHandler() Returns the registered error handler. abstract boolean getFeature(String featureId) Returns the state of a feature. abstract Locale getLocale() Returns the locale. abstract Object getProperty(String propertyId) Returns the value of a property. abstract void parse(XMLInputSource inputSource) Parse an XML document. abstract void setDTDContentModelHandler(XMLDTDContentModelHandler dtdContentModelHandler) Sets the DTD content model handler. abstract void setDTDHandler(XMLDTDHandler dtdHandler) Sets the DTD handler. abstract void setDocumentHandler(XMLDocumentHandler documentHandler) Sets the document handler to receive information about the document. abstract void setEntityResolver(XMLEntityResolver entityResolver) Sets the entity resolver. abstract void setErrorHandler(XMLErrorHandler errorHandler) Sets the error handler. abstract void setFeature(String featureId, boolean state) Sets the state of a feature. abstract void setLocale(Locale locale) Set the locale to use for messages. abstract void setProperty(String propertyId, Object value) Sets the value of a property.
From interface org.apache.xerces.xni.parser.XMLPullParserConfiguration abstract void cleanup() If the application decides to terminate parsing before the xml document is fully parsed, the application should call this method to free any resource allocated during parsing. abstract boolean parse(boolean complete) Parses the document in a pull parsing fashion. abstract void setInputSource(XMLInputSource inputSource) Sets the input source for the document to parse.