Class JiraVelocityGlobalMethodAllowlist

java.lang.Object
com.atlassian.velocity.JiraVelocityGlobalMethodAllowlist
All Implemented Interfaces:
com.atlassian.velocity.allowlist.api.GlobalMethodAllowlist

public class JiraVelocityGlobalMethodAllowlist extends Object implements com.atlassian.velocity.allowlist.api.GlobalMethodAllowlist
Implements the GlobalMethodAllowlist interface to provide a mechanism for determining if a method is allowed to be executed via Velocity template engine. This class relies on a PluginAwareSecureIntrospector to perform the actual security checks.
Since:
v10.0.0
  • Constructor Details

    • JiraVelocityGlobalMethodAllowlist

      public JiraVelocityGlobalMethodAllowlist()
  • Method Details

    • isAllowlistedMethod

      public boolean isAllowlistedMethod(@Nullable Object target, @Nonnull Method method)
      Specified by:
      isAllowlistedMethod in interface com.atlassian.velocity.allowlist.api.GlobalMethodAllowlist