KickJava   Java API By Example, From Geeks To Geeks.

Java > Open Source Codes > com > sun > org > apache > xerces > internal > parsers > SecurityConfiguration


1 /*
2  * The Apache Software License, Version 1.1
3  *
4  *
5  * Copyright (c) 2001-2004 The Apache Software Foundation.
6  * All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  *
12  * 1. Redistributions of source code must retain the above copyright
13  * notice, this list of conditions and the following disclaimer.
14  *
15  * 2. Redistributions in binary form must reproduce the above copyright
16  * notice, this list of conditions and the following disclaimer in
17  * the documentation and/or other materials provided with the
18  * distribution.
19  *
20  * 3. The end-user documentation included with the redistribution,
21  * if any, must include the following acknowledgment:
22  * "This product includes software developed by the
23  * Apache Software Foundation (http://www.apache.org/)."
24  * Alternately, this acknowledgment may appear in the software itself,
25  * if and wherever such third-party acknowledgments normally appear.
26  *
27  * 4. The names "Xerces" and "Apache Software Foundation" must
28  * not be used to endorse or promote products derived from this
29  * software without prior written permission. For written
30  * permission, please contact apache@apache.org.
31  *
32  * 5. Products derived from this software may not be called "Apache",
33  * nor may "Apache" appear in their name, without prior written
34  * permission of the Apache Software Foundation.
35  *
36  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
37  * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
38  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
39  * DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
40  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
41  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
42  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
43  * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
44  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
45  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
46  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
47  * SUCH DAMAGE.
48  * ====================================================================
49  *
50  * This software consists of voluntary contributions made by many
51  * individuals on behalf of the Apache Software Foundation and was
52  * originally based on software copyright (c) 2002, International
53  * Business Machines, Inc., http://www.apache.org. For more
54  * information on the Apache Software Foundation, please see
55  * <http://www.apache.org/>.
56  */
57
58 package com.sun.org.apache.xerces.internal.parsers;
59
60
61 import com.sun.org.apache.xerces.internal.impl.Constants;
62 import com.sun.org.apache.xerces.internal.xni.grammars.XMLGrammarPool;
63 import com.sun.org.apache.xerces.internal.xni.parser.XMLComponentManager;
64 import com.sun.org.apache.xerces.internal.util.SymbolTable;
65 import com.sun.org.apache.xerces.internal.util.SecurityManager;
66
67 /**
68  * This configuration allows Xerces to behave in a security-conscious manner; that is,
69  * it permits applications to instruct Xerces to limit certain
70  * operations that could be exploited by malicious document authors to cause a denail-of-service
71  * attack when the document is parsed.
72  *
73  * In addition to the features and properties recognized by the base
74  * parser configuration, this class recognizes these additional
75  * features and properties:
76  * <ul>
77  * <li>Properties
78  * <ul>
79  * <li>http://apache.org/xml/properties/security-manager</li>
80  * </ul>
81  * </ul>
82  *
83  * @author Neil Graham, IBM
84  * @author Gopal Sharma, Sun Microsystems Inc.
85  *
86  * @version $Id: SecurityConfiguration.java,v 1.4 2004/02/16 19:28:30 mrglavas Exp $
87  */
88 public class SecurityConfiguration extends XML11Configuration
89 {
90
91     //
92 // Constants
93 //
94
95     protected static final String JavaDoc SECURITY_MANAGER_PROPERTY =
96         Constants.XERCES_PROPERTY_PREFIX + Constants.SECURITY_MANAGER_PROPERTY;
97
98     //
99 // Constructors
100 //
101
102     /** Default constructor. */
103     public SecurityConfiguration () {
104         this(null, null, null);
105     } // <init>()
106
107     /**
108      * Constructs a parser configuration using the specified symbol table.
109      *
110      * @param symbolTable The symbol table to use.
111      */
112     public SecurityConfiguration (SymbolTable symbolTable) {
113         this(symbolTable, null, null);
114     } // <init>(SymbolTable)
115
116     /**
117      * Constructs a parser configuration using the specified symbol table and
118      * grammar pool.
119      * <p>
120      * <strong>REVISIT:</strong>
121      * Grammar pool will be updated when the new validation engine is
122      * implemented.
123      *
124      * @param symbolTable The symbol table to use.
125      * @param grammarPool The grammar pool to use.
126      */
127     public SecurityConfiguration (SymbolTable symbolTable,
128                                          XMLGrammarPool grammarPool) {
129         this(symbolTable, grammarPool, null);
130     } // <init>(SymbolTable,XMLGrammarPool)
131
132     /**
133      * Constructs a parser configuration using the specified symbol table,
134      * grammar pool, and parent settings.
135      * <p>
136      * <strong>REVISIT:</strong>
137      * Grammar pool will be updated when the new validation engine is
138      * implemented.
139      *
140      * @param symbolTable The symbol table to use.
141      * @param grammarPool The grammar pool to use.
142      * @param parentSettings The parent settings.
143      */
144     public SecurityConfiguration (SymbolTable symbolTable,
145                                          XMLGrammarPool grammarPool,
146                                          XMLComponentManager parentSettings) {
147         super(symbolTable, grammarPool, parentSettings);
148         
149         // create the SecurityManager property:
150 setProperty(SECURITY_MANAGER_PROPERTY, new SecurityManager JavaDoc());
151     } // <init>(SymbolTable,XMLGrammarPool)
152
153 } // class SecurityConfiguration
154
155
Popular Tags