Package org.sonar.java.se.checks

Class AllowXMLInclusionCheck

java.lang.Object

org.sonar.java.se.checks.SECheck

org.sonar.java.se.checks.AbstractXMLProcessing

org.sonar.java.se.checks.AllowXMLInclusionCheck

All Implemented Interfaces:

JavaCheck, JavaFileScanner

public class AllowXMLInclusionCheck
extends AbstractXMLProcessing

This check uses the symbolic value and constraints set by XxeProcessingCheck. It must therefore always be executed afterwards.

See Also:

• XxeProcessingCheck

Nested Class Summary

Nested classes/interfaces inherited from class org.sonar.java.se.checks.SECheck

SECheck.SEIssue

Field Summary

Fields inherited from class org.sonar.java.se.checks.SECheck

issues

Constructor Summary

Constructors

Constructor	Description
AllowXMLInclusionCheck()

Method Summary

Modifier and Type	Method	Description
protected List<Class<? extends Constraint>>	getDomains()
protected String	getMessage()
protected MethodMatchers	getParsingMethods()
protected boolean	isUnSecuredByProperty(ConstraintsByDomain constraintsByDomain)
protected boolean	shouldTrackConstraint(Constraint constraint)

Methods inherited from class org.sonar.java.se.checks.AbstractXMLProcessing

checkEndOfExecutionPath, checkPreStatement

Methods inherited from class org.sonar.java.se.checks.SECheck

checkEndOfExecution, checkPostStatement, init, interruptedExecution, reportIssue, reportIssue, scanFile

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.sonar.plugins.java.api.JavaFileScanner

scanWithoutParsing

Constructor Details

AllowXMLInclusionCheck

public AllowXMLInclusionCheck()

Method Details

getParsingMethods

protected MethodMatchers getParsingMethods()

Specified by:

getParsingMethods in class AbstractXMLProcessing

isUnSecuredByProperty

protected boolean isUnSecuredByProperty(@Nullable
 ConstraintsByDomain constraintsByDomain)

Specified by:

isUnSecuredByProperty in class AbstractXMLProcessing

getMessage

protected String getMessage()

Specified by:

getMessage in class AbstractXMLProcessing

shouldTrackConstraint

protected boolean shouldTrackConstraint(Constraint constraint)

Specified by:

shouldTrackConstraint in class AbstractXMLProcessing

getDomains

protected List<Class<? extends Constraint>> getDomains()

Specified by:

getDomains in class AbstractXMLProcessing