Class ConfluenceAllowlistIntrospector
java.lang.Object
org.apache.velocity.util.introspection.IntrospectorBase
org.apache.velocity.util.introspection.Introspector
org.apache.velocity.util.introspection.SecureIntrospectorImpl
com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
com.atlassian.confluence.impl.velocity.ConfluenceAllowlistIntrospector
- All Implemented Interfaces:
org.apache.velocity.util.introspection.SecureIntrospectorControl
public class ConfluenceAllowlistIntrospector
extends com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
Integrates Confluence-specific allowlisting criteria into the
PluginAwareSecureIntrospector
.- Since:
- 9.0.0
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic @interface
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final String
EXPERIMENTAL FEATURE - used for internal testing only.Fields inherited from class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
ALLOWLIST_DEBUG_PROPERTY, ALLOWLIST_DEBUG_PROPERTY_ALT, ALLOWLIST_EXTRA_PROPERTY, ALLOWLIST_EXTRA_PROPERTY_ALT
Fields inherited from class org.apache.velocity.util.introspection.IntrospectorBase
log
-
Constructor Summary
ConstructorsConstructorDescriptionConfluenceAllowlistIntrospector
(org.apache.velocity.runtime.log.Log log, org.apache.velocity.runtime.RuntimeServices runtimeServices) -
Method Summary
Methods inherited from class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
isAllowlistDebugMode, isAllowlistedClassPackageCached, isAllowlistedMethodCached, isIntrospectorEnabled, loadClass, onPluginFrameworkStarted, setPluginAllowlist, toMethodStr
Methods inherited from class org.apache.velocity.util.introspection.SecureIntrospectorImpl
checkObjectExecutePermission, checkObjectExecutePermission, getMethod, getMethod, isAllowlisted, isAllowlistedClass, isAllowlistedClassPackageInternal, isAllowlistedInternal, isAllowlistEnabled, isClassPackageRestricted, isClassRestricted, isExecutionRestricted, isPackageMatches, isParametersRestricted, isParamsContainPathTraversal, isRestrictedClass, isRestrictedClassPackageCached, isRestrictedClassPackageInternal, resolveArrayClass, toClassSet, toMethodSet, toPackageName, toParsedSet, topLevelChecks, toValidatedClassSet
Methods inherited from class org.apache.velocity.util.introspection.IntrospectorBase
getIntrospectorCache
-
Field Details
-
ANNOTATIONS_ENABLE_SYS_PROP
EXPERIMENTAL FEATURE - used for internal testing only.- See Also:
-
-
Constructor Details
-
ConfluenceAllowlistIntrospector
public ConfluenceAllowlistIntrospector(org.apache.velocity.runtime.log.Log log, org.apache.velocity.runtime.RuntimeServices runtimeServices)
-
-
Method Details
-
isAllowlistedMethodInternal
- Overrides:
isAllowlistedMethodInternal
in classcom.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
-