public class AttributeToContextCallbackHandler<T>
extends org.springframework.ldap.core.ContextMapperCallbackHandler<T>
Modified by Atlassian From Spring LDAP 2.0.2.RELEASE
The purpose of this class is to provide a DirContextAdapter when no object was bound to the Binding returned.
This is to facilitate the fix for the CWD-4754 vulnerability,
which consists of setting the returnObj
flag in SearchControls to false, so that JNDI's Java object
unmarshalling feature won't be used.
Changes:
- if no object was bound to the Binding
, but the NameClassPair
was an
instance of SearchResult
, then a DirContextAdapter
wrapping the NameClassPair
will be returned.
Constructor and Description |
---|
AttributeToContextCallbackHandler(org.springframework.ldap.core.ContextMapper<T> mapper) |
Modifier and Type | Method and Description |
---|---|
T |
getObjectFromNameClassPair(NameClassPair nameClassPair) |
public AttributeToContextCallbackHandler(org.springframework.ldap.core.ContextMapper<T> mapper)
public T getObjectFromNameClassPair(NameClassPair nameClassPair) throws NamingException
getObjectFromNameClassPair
in class org.springframework.ldap.core.ContextMapperCallbackHandler<T>
NamingException
Copyright © 2021 Atlassian. All rights reserved.