com.atlassian.confluence.impl.xstream.security

Class XStreamSecurityConfigurator

java.lang.Object

com.atlassian.confluence.impl.xstream.security.XStreamSecurityConfigurator

@Internal
public class XStreamSecurityConfigurator
extends Object

Configures allow-list security framework. Toggle framework with if xstream.allowlist.enable sysprop Provides extra allow-list packages in CSV format to xstream.allowlist.extra We still keep backward compatibility with xstream.whitelist.enable and xstream.whitelistlist.extra A plugin developer can use XStream's API to configure security with types/wildcards. See: https://x-stream.github.io/security.html#example

Since:

7.10.0

Field Summary

Fields

Modifier and Type	Field and Description
static Set<String>	ALLOWED_PACKAGES

Constructor Summary

Constructors

Constructor and Description
XStreamSecurityConfigurator()

Method Summary

Modifier and Type	Method and Description
void	addAllowTypes(String pluginKey, Set<String> types)
void	addAllowTypesByRegExps(String pluginKey, Set<String> typesByRegExps)
void	addAllowTypesByWildcard(String pluginKey, Set<String> wildcards)
void	clearPluginSecurityData(String pluginKey)
void	configureXStreamSecurity(ConfluenceXStreamInternal confluenceXStream)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ALLOWED_PACKAGES

public static final Set<String> ALLOWED_PACKAGES

Constructor Detail

XStreamSecurityConfigurator

public XStreamSecurityConfigurator()

Method Detail

configureXStreamSecurity

public void configureXStreamSecurity(ConfluenceXStreamInternal confluenceXStream)

addAllowTypes

public void addAllowTypes(String pluginKey,
                          Set<String> types)

addAllowTypesByRegExps

public void addAllowTypesByRegExps(String pluginKey,
                                   Set<String> typesByRegExps)

addAllowTypesByWildcard

public void addAllowTypesByWildcard(String pluginKey,
                                    Set<String> wildcards)

clearPluginSecurityData

public void clearPluginSecurityData(String pluginKey)