Package org.sonar.java.se.checks

Interface XxeProperty

All Known Implementing Classes:

XxeProperty.AttributeDTD, XxeProperty.AttributeSchema, XxeProperty.AttributeStyleSheet, XxeProperty.FeatureDisallowDoctypeDecl, XxeProperty.FeatureExternalGeneralEntities, XxeProperty.FeatureIsSupportingExternalEntities, XxeProperty.FeatureLoadExternalDtd, XxeProperty.FeatureSecureProcessing, XxeProperty.FeatureSupportDtd, XxeProperty.FeatureXInclude

public interface XxeProperty

A property is independently a XXE feature or XXE attribute

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static enum	XxeProperty.AttributeDTD
static enum	XxeProperty.AttributeSchema
static enum	XxeProperty.AttributeStyleSheet
static enum	XxeProperty.FeatureDisallowDoctypeDecl
static enum	XxeProperty.FeatureExternalGeneralEntities
static enum	XxeProperty.FeatureIsSupportingExternalEntities
static enum	XxeProperty.FeatureLoadExternalDtd
static enum	XxeProperty.FeatureSecureProcessing
static enum	XxeProperty.FeatureSupportDtd
static enum	XxeProperty.FeatureXInclude
static class	XxeProperty.XxePropertyHolder

Field Summary

Fields

Modifier and Type	Field	Description
static final String	UNSECURED_USE_EMPTY_STRING_TO_PROTECT_AGAINST_XXE

Method Summary

Modifier and Type	Method	Description
default boolean	isNamed(String name)
default boolean	isSecuring(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToEmptyString(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToFalse(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToNonEmptyString(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToTrue(SymbolicValue sv1, ExpressionTree arg1)
default boolean	isUnsecuring(SymbolicValue sv1, ExpressionTree arg1)
default Constraint	namedConstraint()
XxeProperty.XxePropertyHolder	properties()
default Constraint	securedConstraint()
default Constraint	unsecuredConstraint()

Field Details

UNSECURED_USE_EMPTY_STRING_TO_PROTECT_AGAINST_XXE

static final String UNSECURED_USE_EMPTY_STRING_TO_PROTECT_AGAINST_XXE

See Also:

• Constant Field Values

Method Details

properties

XxeProperty.XxePropertyHolder properties()

isNamed

default boolean isNamed(String name)

securedConstraint

default Constraint securedConstraint()

namedConstraint

default Constraint namedConstraint()

isSecuring

default boolean isSecuring(@Nullable
 SymbolicValue sv1,
 ExpressionTree arg1)

unsecuredConstraint

default Constraint unsecuredConstraint()

isUnsecuring

default boolean isUnsecuring(@Nullable
 SymbolicValue sv1,
 ExpressionTree arg1)

isSetToEmptyString

static boolean isSetToEmptyString(@Nullable
 SymbolicValue sv1,
 ExpressionTree arg1)

isSetToNonEmptyString

static boolean isSetToNonEmptyString(@Nullable
 SymbolicValue sv1,
 ExpressionTree arg1)

isSetToFalse

static boolean isSetToFalse(@Nullable
 SymbolicValue sv1,
 ExpressionTree arg1)

isSetToTrue

static boolean isSetToTrue(@Nullable
 SymbolicValue sv1,
 ExpressionTree arg1)