com.atlassian.velocity.htmlsafe.introspection

Class AllowlistSecureUberspector

java.lang.Object

org.apache.velocity.util.introspection.UberspectImpl

org.apache.velocity.util.introspection.SecureUberspector

com.atlassian.velocity.htmlsafe.introspection.AllowlistSecureUberspector

All Implemented Interfaces:

org.apache.velocity.util.introspection.Uberspect, org.apache.velocity.util.introspection.UberspectLoggable, org.apache.velocity.util.RuntimeServicesAware

Direct Known Subclasses:

AnnotationBoxingUberspect

public class AllowlistSecureUberspector
extends org.apache.velocity.util.introspection.SecureUberspector

A Secure Velocity uberspect that allow use of single classes or single packages that are under restricted packages specified by introspector.restrict.packages.

The class is most useful for scenarios where classes under package are potentially harmful but package also contains safe classes.

https://jira.atlassian.com/browse/JRASERVER-71733

Since:

3.2.0

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.velocity.util.introspection.UberspectImpl

org.apache.velocity.util.introspection.UberspectImpl.VelGetterImpl, org.apache.velocity.util.introspection.UberspectImpl.VelMethodImpl, org.apache.velocity.util.introspection.UberspectImpl.VelSetterImpl

Field Summary

Fields inherited from class org.apache.velocity.util.introspection.UberspectImpl

EMPTY_ARRAY, introspector, log, runtimeServices

Constructor Summary

Constructors

Constructor and Description
AllowlistSecureUberspector()

Method Summary

Modifier and Type	Method and Description
void	init()

Methods inherited from class org.apache.velocity.util.introspection.SecureUberspector

getIterator

Methods inherited from class org.apache.velocity.util.introspection.UberspectImpl

getMethod, getPropertyGet, getPropertySet, setLog, setRuntimeLogger, setRuntimeServices

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.velocity.util.RuntimeServicesAware

setRuntimeServices

Constructor Detail

AllowlistSecureUberspector

public AllowlistSecureUberspector()

Method Detail

init

public void init()
          throws Exception

Specified by:

init in interface org.apache.velocity.util.introspection.Uberspect

Overrides:

init in class org.apache.velocity.util.introspection.SecureUberspector

Throws:

Exception