Package com.atlassian.bamboo.struts

Class BambooSecurityMemberAccess

java.lang.Object

org.apache.struts2.ognl.SecurityMemberAccess

com.atlassian.security.serialblocklist.struts.BlocklistAwareSecureMembersAccess

com.atlassian.bamboo.struts.BambooSecurityMemberAccess

All Implemented Interfaces:

ognl.MemberAccess

public class BambooSecurityMemberAccess
extends com.atlassian.security.serialblocklist.struts.BlocklistAwareSecureMembersAccess

Extends the default Struts SecurityMemberAccess to allowlist plugin classes for OGNL expressions.

Constructor Summary

Constructors

Constructor	Description
BambooSecurityMemberAccess(org.apache.struts2.ognl.ProviderAllowlist providerAllowlist, org.apache.struts2.ognl.ThreadAllowlist threadAllowlist)

Method Summary

Modifier and Type	Method	Description
protected boolean	isClassAllowlisted(Class<?> clazz)

Methods inherited from class com.atlassian.security.serialblocklist.struts.BlocklistAwareSecureMembersAccess

isAccessible

Methods inherited from class org.apache.struts2.ognl.SecurityMemberAccess

checkAllowlist, checkDefaultPackageAccess, checkExclusionList, checkProxyMemberAccess, checkProxyObjectAccess, checkPublicMemberAccess, checkStaticFieldAccess, checkStaticMethodAccess, isAcceptableProperty, isAccepted, isClassBelongsToPackages, isClassExcluded, isExcluded, isExcludedPackageNamePatterns, isExcludedPackageNames, isPackageExcluded, restore, setup, toPackageName, useAcceptProperties, useAllowlistClasses, useAllowlistPackageNames, useAllowStaticFieldAccess, useDevMode, useDevModeExcludedClasses, useDevModeExcludedPackageExemptClasses, useDevModeExcludedPackageNamePatterns, useDevModeExcludedPackageNames, useDisallowDefaultPackageAccess, useDisallowProxyMemberAccess, useDisallowProxyObjectAccess, useEnforceAllowlistEnabled, useExcludedClasses, useExcludedPackageExemptClasses, useExcludedPackageNamePatterns, useExcludedPackageNames, useExcludeProperties

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

BambooSecurityMemberAccess

public BambooSecurityMemberAccess(org.apache.struts2.ognl.ProviderAllowlist providerAllowlist,
 org.apache.struts2.ognl.ThreadAllowlist threadAllowlist)

Method Details

isClassAllowlisted

protected boolean isClassAllowlisted(Class<?> clazz)

Overrides:

isClassAllowlisted in class org.apache.struts2.ognl.SecurityMemberAccess