Package com.atlassian.crowd.directory.ldap.mapper

Class AttributeToContextCallbackHandler<T>

java.lang.Object
org.springframework.ldap.core.CollectingNameClassPairCallbackHandler<T>
org.springframework.ldap.core.ContextMapperCallbackHandler<T>
com.atlassian.crowd.directory.ldap.mapper.AttributeToContextCallbackHandler<T>
All Implemented Interfaces:
org.springframework.ldap.core.NameClassPairCallbackHandler
public class AttributeToContextCallbackHandler<T> extends org.springframework.ldap.core.ContextMapperCallbackHandler<T>

Modified by Atlassian From Spring LDAP 2.0.2.RELEASE

The purpose of this class is to provide a NameAttributesPair when no object was bound to the Binding returned. This is to facilitate the fix for the CWD-4754 vulnerability, which consists of setting the returnObj flag in SearchControls to false, so that JNDI's Java object unmarshalling feature won't be used.

Changes: - if no object was bound to the Binding, but the NameClassPair was an instance of SearchResult, then a NameAttributesPair wrapping the name and attributes will be returned.

  • Constructor Details

    • AttributeToContextCallbackHandler

      public AttributeToContextCallbackHandler(org.springframework.ldap.core.ContextMapper<T> mapper)

  • Method Details

    • getObjectFromNameClassPair

      public T getObjectFromNameClassPair(NameClassPair nameClassPair) throws NamingException
      Overrides:
      getObjectFromNameClassPair in class org.springframework.ldap.core.ContextMapperCallbackHandler<T>
      Throws:
      NamingException