< prev index next >

src/java.xml/share/classes/com/sun/org/apache/xalan/internal/utils/XMLSecurityManager.java

Print this page




   9  * by Oracle in the LICENSE file that accompanied this code.
  10  *
  11  * This code is distributed in the hope that it will be useful, but WITHOUT
  12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  14  * version 2 for more details (a copy is included in the LICENSE file that
  15  * accompanied this code).
  16  *
  17  * You should have received a copy of the GNU General Public License version
  18  * 2 along with this work; if not, write to the Free Software Foundation,
  19  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  20  *
  21  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  22  * or visit www.oracle.com if you need additional information or have any
  23  * questions.
  24  */
  25 
  26 package com.sun.org.apache.xalan.internal.utils;
  27 
  28 import com.sun.org.apache.xalan.internal.XalanConstants;


  29 
  30 
  31 /**
  32  * This class is not the same as that in Xerces. It is used to manage the
  33  * state of corresponding Xerces properties and pass the values over to
  34  * the Xerces Security Manager.
  35  *
  36  * @author Joe Wang Oracle Corp.
  37  *
  38  */
  39 public final class XMLSecurityManager {
  40 
  41     /**
  42      * States of the settings of a property, in the order: default value, value
  43      * set by FEATURE_SECURE_PROCESSING, jaxp.properties file, jaxp system
  44      * properties, and jaxp api properties
  45      */
  46     public static enum State {
  47         //this order reflects the overriding order
  48 


 396     public boolean printEntityCountInfo() {
 397         return printEntityCountInfo.equals(XalanConstants.JDK_YES);
 398     }
 399     /**
 400      * Read from system properties, or those in jaxp.properties
 401      */
 402     private void readSystemProperties() {
 403 
 404         for (Limit limit : Limit.values()) {
 405             if (!getSystemProperty(limit, limit.systemProperty())) {
 406                 //if system property is not found, try the older form if any
 407                 for (NameMap nameMap : NameMap.values()) {
 408                     String oldName = nameMap.getOldName(limit.systemProperty());
 409                     if (oldName != null) {
 410                         getSystemProperty(limit, oldName);
 411                     }
 412                 }
 413             }
 414         }
 415 

















 416     }
 417 
 418     /**
 419      * Read from system properties, or those in jaxp.properties
 420      *
 421      * @param property the type of the property
 422      * @param sysPropertyName the name of system property
 423      */
 424     private boolean getSystemProperty(Limit limit, String sysPropertyName) {
 425         try {
 426             String value = SecuritySupport.getSystemProperty(sysPropertyName);
 427             if (value != null && !value.equals("")) {
 428                 values[limit.ordinal()] = Integer.parseInt(value);
 429                 states[limit.ordinal()] = State.SYSTEMPROPERTY;
 430                 return true;
 431             }
 432 
 433             value = SecuritySupport.readJAXPProperty(sysPropertyName);
 434             if (value != null && !value.equals("")) {
 435                 values[limit.ordinal()] = Integer.parseInt(value);


   9  * by Oracle in the LICENSE file that accompanied this code.
  10  *
  11  * This code is distributed in the hope that it will be useful, but WITHOUT
  12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  14  * version 2 for more details (a copy is included in the LICENSE file that
  15  * accompanied this code).
  16  *
  17  * You should have received a copy of the GNU General Public License version
  18  * 2 along with this work; if not, write to the Free Software Foundation,
  19  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  20  *
  21  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  22  * or visit www.oracle.com if you need additional information or have any
  23  * questions.
  24  */
  25 
  26 package com.sun.org.apache.xalan.internal.utils;
  27 
  28 import com.sun.org.apache.xalan.internal.XalanConstants;
  29 import java.util.concurrent.CopyOnWriteArrayList;
  30 import org.xml.sax.SAXException;
  31 
  32 
  33 /**
  34  * This class is not the same as that in Xerces. It is used to manage the
  35  * state of corresponding Xerces properties and pass the values over to
  36  * the Xerces Security Manager.
  37  *
  38  * @author Joe Wang Oracle Corp.
  39  *
  40  */
  41 public final class XMLSecurityManager {
  42 
  43     /**
  44      * States of the settings of a property, in the order: default value, value
  45      * set by FEATURE_SECURE_PROCESSING, jaxp.properties file, jaxp system
  46      * properties, and jaxp api properties
  47      */
  48     public static enum State {
  49         //this order reflects the overriding order
  50 


 398     public boolean printEntityCountInfo() {
 399         return printEntityCountInfo.equals(XalanConstants.JDK_YES);
 400     }
 401     /**
 402      * Read from system properties, or those in jaxp.properties
 403      */
 404     private void readSystemProperties() {
 405 
 406         for (Limit limit : Limit.values()) {
 407             if (!getSystemProperty(limit, limit.systemProperty())) {
 408                 //if system property is not found, try the older form if any
 409                 for (NameMap nameMap : NameMap.values()) {
 410                     String oldName = nameMap.getOldName(limit.systemProperty());
 411                     if (oldName != null) {
 412                         getSystemProperty(limit, oldName);
 413                     }
 414                 }
 415             }
 416         }
 417 
 418     }
 419 
 420     // Array list to store printed warnings for each SAX parser used
 421     private static final CopyOnWriteArrayList<String> printedWarnings = new CopyOnWriteArrayList<>();
 422 
 423     /**
 424      * Prints out warnings if a parser does not support the specified feature/property.
 425      *
 426      * @param parserClassName the name of the parser class
 427      * @param propertyName the property name
 428      * @param exception the exception thrown by the parser
 429      */
 430     public static void printWarning(String parserClassName, String propertyName, SAXException exception) {
 431         String key = parserClassName+":"+propertyName;
 432         if (printedWarnings.addIfAbsent(key)) {
 433             System.err.println( "Warning: "+parserClassName+": "+exception.getMessage());
 434         }
 435     }
 436 
 437     /**
 438      * Read from system properties, or those in jaxp.properties
 439      *
 440      * @param property the type of the property
 441      * @param sysPropertyName the name of system property
 442      */
 443     private boolean getSystemProperty(Limit limit, String sysPropertyName) {
 444         try {
 445             String value = SecuritySupport.getSystemProperty(sysPropertyName);
 446             if (value != null && !value.equals("")) {
 447                 values[limit.ordinal()] = Integer.parseInt(value);
 448                 states[limit.ordinal()] = State.SYSTEMPROPERTY;
 449                 return true;
 450             }
 451 
 452             value = SecuritySupport.readJAXPProperty(sysPropertyName);
 453             if (value != null && !value.equals("")) {
 454                 values[limit.ordinal()] = Integer.parseInt(value);
< prev index next >