OpenJDK 27 · com.sun.org.apache.xerces.internal.util.SecurityManager

This class is a container for parser settings that relate to security, or more specifically, it is intended to be used to prevent denial-of-service attacks from being launched against a system running Xerces. Any component that is aware of a denial-of-service attack that can arise from its processing of a certain kind of document may query its Component Manager for the property (http://apache.org/xml/properties/security-manager) whose value will be an instance of this class. If no value has been set for the property, the component should proceed in the "usual" (spec-compliant) manner. If a value has been set, then it must be the case that the component in question needs to know what method of this class to query. This class will provide defaults for all known security issues, but will also provide setters so that those values can be tailored by applications that care.

Field Summary

Modifier and Type	Field and Description
private static final int	DEFAULT_ELEMENT_ATTRIBUTE_LIMIT
private static final int	DEFAULT_ENTITY_EXPANSION_LIMIT
private static final int	DEFAULT_MAX_OCCUR_NODE_LIMIT Default value of number of nodes created.
private int	entityExpansionLimit Entity expansion limit.
private int	fElementAttributeLimit
private int	maxOccurLimit W3C XML Schema maxOccurs limit.

Constructor Summary

Access	Constructor and Description
public	SecurityManager() Default constructor.

Method Summary

Modifier and Type	Method and Description
public int	getElementAttrLimit()
public int	Returns: the number of entity expansions permitted in a document getEntityExpansionLimit() Returns the number of entity expansions that the parser permits in a document.
public int	Returns: the maximum value for maxOccurs other than "unbounded" getMaxOccurNodeLimit() Returns the limit of the number of content model nodes that may be created when building a grammar for a W3C XML Schema that contains maxOccurs attributes with values other than "unbounded".
private void	readSystemProperties()
public void	setElementAttrLimit(int limit)
public void	setEntityExpansionLimit(int the number of entity expansions permitted in a document limit) Sets the number of entity expansions that the parser should permit in a document.
public void	setMaxOccurNodeLimit(int the maximum value for maxOccurs other than "unbounded" limit) Sets the limit of the number of content model nodes that may be created when building a grammar for a W3C XML Schema that contains maxOccurs attributes with values other than "unbounded".

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

DEFAULT_ELEMENT_ATTRIBUTE_LIMIT	back to summary
private static final int DEFAULT_ELEMENT_ATTRIBUTE_LIMIT

DEFAULT_ENTITY_EXPANSION_LIMIT	back to summary
private static final int DEFAULT_ENTITY_EXPANSION_LIMIT

DEFAULT_MAX_OCCUR_NODE_LIMIT	back to summary
private static final int DEFAULT_MAX_OCCUR_NODE_LIMIT Default value of number of nodes created. *

entityExpansionLimit	back to summary
private int entityExpansionLimit Entity expansion limit. *

fElementAttributeLimit	back to summary
private int fElementAttributeLimit

maxOccurLimit	back to summary
private int maxOccurLimit W3C XML Schema maxOccurs limit. *

Constructor Detail

SecurityManager	back to summary
public SecurityManager() Default constructor. Establishes default values for known security vulnerabilities.

Method Detail

getElementAttrLimit	back to summary
public int getElementAttrLimit()

getEntityExpansionLimit	back to summary
public int getEntityExpansionLimit() Returns the number of entity expansions that the parser permits in a document. Returns:int the number of entity expansions permitted in a document

getEntityExpansionLimit

back to summary

public int getEntityExpansionLimit()

Returns the number of entity expansions that the parser permits in a document.

Returns:int: the number of entity expansions permitted in a document

getMaxOccurNodeLimit	back to summary
public int getMaxOccurNodeLimit() Returns the limit of the number of content model nodes that may be created when building a grammar for a W3C XML Schema that contains maxOccurs attributes with values other than "unbounded". Returns:int the maximum value for maxOccurs other than "unbounded"

getMaxOccurNodeLimit

back to summary

public int getMaxOccurNodeLimit()

Returns the limit of the number of content model nodes that may be created when building a grammar for a W3C XML Schema that contains maxOccurs attributes with values other than "unbounded".

Returns:int: the maximum value for maxOccurs other than "unbounded"

readSystemProperties	back to summary
private void readSystemProperties()

setElementAttrLimit	back to summary
public void setElementAttrLimit(int limit)

setEntityExpansionLimit	back to summary
public void setEntityExpansionLimit(int limit) Sets the number of entity expansions that the parser should permit in a document. Parameters limit:int the number of entity expansions permitted in a document

setEntityExpansionLimit

back to summary

public void setEntityExpansionLimit(int limit)

Sets the number of entity expansions that the parser should permit in a document.

Parameters

limit:int: the number of entity expansions permitted in a document

setMaxOccurNodeLimit	back to summary
public void setMaxOccurNodeLimit(int limit) Sets the limit of the number of content model nodes that may be created when building a grammar for a W3C XML Schema that contains maxOccurs attributes with values other than "unbounded". Parameters limit:int the maximum value for maxOccurs other than "unbounded"

setMaxOccurNodeLimit

back to summary

public void setMaxOccurNodeLimit(int limit)

Sets the limit of the number of content model nodes that may be created when building a grammar for a W3C XML Schema that contains maxOccurs attributes with values other than "unbounded".

Parameters

limit:int: the maximum value for maxOccurs other than "unbounded"

public final Class SecurityManager

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail