Package com.atlassian.confluence.impl.xstream.security

Class XStreamSecurityConfigurator

java.lang.Object

com.atlassian.confluence.impl.xstream.security.XStreamSecurityConfigurator

@Internal
public class XStreamSecurityConfigurator
extends Object

Configures allow-list security framework. Toggle framework with if xstream.allowlist.enable sysprop Provides extra allow-list packages in CSV format to xstream.allowlist.extra We still keep backward compatibility with xstream.whitelist.enable and xstream.whitelistlist.extra A plugin developer can use XStream's API to configure security with types/wildcards. See: https://x-stream.github.io/security.html#example

Since:

7.10.0

Constructor Summary

Constructors

Constructor	Description
XStreamSecurityConfigurator()

Method Summary

Modifier and Type	Method	Description
void	addAllowTypes(String pluginKey, Set<String> types)
void	addAllowTypesByRegExps(String pluginKey, Set<String> typesByRegExps)
void	addAllowTypesByWildcard(String pluginKey, Set<String> wildcards)
void	clearPluginSecurityData(String pluginKey)
void	configureXStreamSecurity(ConfluenceXStreamInternal confluenceXStream)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XStreamSecurityConfigurator

public XStreamSecurityConfigurator()

Method Detail

configureXStreamSecurity

public void configureXStreamSecurity(ConfluenceXStreamInternal confluenceXStream)

addAllowTypes

public void addAllowTypes(String pluginKey,
                          Set<String> types)

addAllowTypesByRegExps

public void addAllowTypesByRegExps(String pluginKey,
                                   Set<String> typesByRegExps)

addAllowTypesByWildcard

public void addAllowTypesByWildcard(String pluginKey,
                                    Set<String> wildcards)

clearPluginSecurityData

public void clearPluginSecurityData(String pluginKey)