org.mule.runtime.api.util.xmlsecurity

Class XMLSecureFactories

java.lang.Object

org.mule.runtime.api.util.xmlsecurity.XMLSecureFactories

public final class XMLSecureFactories
extends Object

Provide XML parser factories configured to avoid XXE and BL attacks according to global configuration (safe by default)

Since:

1.4.0

Field Summary

Fields

Modifier and Type	Field and Description
static String	EXPAND_ENTITIES_PROPERTY
static String	EXTERNAL_ENTITIES_PROPERTY

Method Summary

Modifier and Type	Method and Description
void	configureTransformerFactory(TransformerFactory factory)
void	configureValidator(Validator validator)
void	configureXMLInputFactory(XMLInputFactory factory)
static XMLSecureFactories	createDefault()
static XMLSecureFactories	createWithConfig(Boolean externalEntities, Boolean expandEntities)
DocumentBuilderFactory	getDocumentBuilderFactory()
SAXParserFactory	getSAXParserFactory()
SchemaFactory	getSchemaFactory(String schemaLocation)
TransformerFactory	getTransformerFactory()
XMLInputFactory	getXMLInputFactory()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

EXTERNAL_ENTITIES_PROPERTY

public static final String EXTERNAL_ENTITIES_PROPERTY

See Also:

Constant Field Values

EXPAND_ENTITIES_PROPERTY

public static final String EXPAND_ENTITIES_PROPERTY

See Also:

Constant Field Values

Method Detail

createWithConfig

public static XMLSecureFactories createWithConfig(Boolean externalEntities,
                                                  Boolean expandEntities)

createDefault

public static XMLSecureFactories createDefault()

getDocumentBuilderFactory

public DocumentBuilderFactory getDocumentBuilderFactory()

getSAXParserFactory

public SAXParserFactory getSAXParserFactory()

getXMLInputFactory

public XMLInputFactory getXMLInputFactory()

getTransformerFactory

public TransformerFactory getTransformerFactory()

getSchemaFactory

public SchemaFactory getSchemaFactory(String schemaLocation)

configureXMLInputFactory

public void configureXMLInputFactory(XMLInputFactory factory)

configureTransformerFactory

public void configureTransformerFactory(TransformerFactory factory)

configureValidator

public void configureValidator(Validator validator)