org.mule.runtime.internal.util.xmlsecurity

Class DefaultXMLSecureFactories

java.lang.Object

org.mule.runtime.internal.util.xmlsecurity.DefaultXMLSecureFactories

public class DefaultXMLSecureFactories
extends Object

Create different XML factories configured through the same interface for disabling vulnerabilities.

Also make sure we are using standard Java implementations when not overriding explicitly. This is necessary as some dependencies such as Woodstox and Saxon register service providers that take precedence over the Java defaults (in META-INF/services).

Since:

1.4.0

Field Summary

Fields

Modifier and Type	Field and Description
static String	DOCUMENT_BUILDER_FACTORY
static String	DOCUMENT_BUILDER_PROPERTY
static String	SAX_PARSER_FACTORY
static String	SAX_PARSER_PROPERTY
static String	SCHEMA_FACTORY
static String	SCHEMA_PROPERTY
static String	TRANSFORMER_FACTORY
static String	TRANSFORMER_PROPERTY
static String	XML_INPUT_FACTORY
static String	XML_INPUT_PROPERTY

Constructor Summary

Constructors

Constructor and Description
DefaultXMLSecureFactories(Boolean externalEntities, Boolean expandEntities)

Method Summary

Modifier and Type	Method and Description
void	configureSchemaFactory(SchemaFactory factory) Disables XMLConstants.ACCESS_EXTERNAL_DTD and XMLConstants.ACCESS_EXTERNAL_DTD features if externalEntities and expandEntities are false.
void	configureTransformerFactory(TransformerFactory factory) Disables XMLConstants.ACCESS_EXTERNAL_DTD and XMLConstants.ACCESS_EXTERNAL_STYLESHEET features if externalEntities and expandEntities are false.
void	configureValidator(Validator validator) Disables XMLConstants.ACCESS_EXTERNAL_DTD and XMLConstants.ACCESS_EXTERNAL_DTD features if externalEntities and expandEntities are false.
void	configureXMLInputFactory(XMLInputFactory factory)
DocumentBuilderFactory	createDocumentBuilderFactory()
SAXParserFactory	createSaxParserFactory()
SchemaFactory	createSchemaFactory(String schemaLanguage)
TransformerFactory	createTransformerFactory()
XMLInputFactory	createXMLInputFactory()
Boolean	getExpandEntities()
Boolean	getExternalEntities()
protected static void	logConfigurationWarning(String interfaceName, String implementationName, Throwable e)
protected static void	logCreationWarning(String interfaceName, String desiredImplementation, Throwable e)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DOCUMENT_BUILDER_FACTORY

public static final String DOCUMENT_BUILDER_FACTORY

See Also:

Constant Field Values

SAX_PARSER_FACTORY

public static final String SAX_PARSER_FACTORY

See Also:

Constant Field Values

XML_INPUT_FACTORY

public static final String XML_INPUT_FACTORY

See Also:

Constant Field Values

TRANSFORMER_FACTORY

public static final String TRANSFORMER_FACTORY

See Also:

Constant Field Values

SCHEMA_FACTORY

public static final String SCHEMA_FACTORY

See Also:

Constant Field Values

DOCUMENT_BUILDER_PROPERTY

public static final String DOCUMENT_BUILDER_PROPERTY

See Also:

Constant Field Values

SAX_PARSER_PROPERTY

public static final String SAX_PARSER_PROPERTY

See Also:

Constant Field Values

XML_INPUT_PROPERTY

public static final String XML_INPUT_PROPERTY

See Also:

Constant Field Values

TRANSFORMER_PROPERTY

public static final String TRANSFORMER_PROPERTY

See Also:

Constant Field Values

SCHEMA_PROPERTY

public static final String SCHEMA_PROPERTY

See Also:

Constant Field Values

Constructor Detail

DefaultXMLSecureFactories

public DefaultXMLSecureFactories(Boolean externalEntities,
                                 Boolean expandEntities)

Method Detail

createDocumentBuilderFactory

public DocumentBuilderFactory createDocumentBuilderFactory()

createSaxParserFactory

public SAXParserFactory createSaxParserFactory()

createXMLInputFactory

public XMLInputFactory createXMLInputFactory()

createTransformerFactory

public TransformerFactory createTransformerFactory()

createSchemaFactory

public SchemaFactory createSchemaFactory(String schemaLanguage)

configureXMLInputFactory

public void configureXMLInputFactory(XMLInputFactory factory)

configureTransformerFactory

public void configureTransformerFactory(TransformerFactory factory)

Disables XMLConstants.ACCESS_EXTERNAL_DTD and XMLConstants.ACCESS_EXTERNAL_STYLESHEET features if externalEntities and expandEntities are false.

Parameters:

factory - the TransformerFactory to configure.

See Also:

for more information about supported attributes.

configureSchemaFactory

public void configureSchemaFactory(SchemaFactory factory)

Disables XMLConstants.ACCESS_EXTERNAL_DTD and XMLConstants.ACCESS_EXTERNAL_DTD features if externalEntities and expandEntities are false.

Parameters:

factory - the SchemaFactory to configure.

See Also:

for more information about supported properties.

configureValidator

public void configureValidator(Validator validator)

Disables XMLConstants.ACCESS_EXTERNAL_DTD and XMLConstants.ACCESS_EXTERNAL_DTD features if externalEntities and expandEntities are false.

Parameters:

validator - the Validator to configure.

See Also:

for more information about supported properties.

logConfigurationWarning

protected static void logConfigurationWarning(String interfaceName,
                                              String implementationName,
                                              Throwable e)

logCreationWarning

protected static void logCreationWarning(String interfaceName,
                                         String desiredImplementation,
                                         Throwable e)

getExternalEntities

public Boolean getExternalEntities()

getExpandEntities

public Boolean getExpandEntities()