|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Object com.atlassian.jira.webwork.JiraSafeActionParameterSetter
public class JiraSafeActionParameterSetter
This class is a replacement for the broken and dangerous webwork1 'el' based BeanUtil.setProperties(java.util.Map, Object)
java.beans
setters can be invoked. You can not longer navigate away from an Action
into other code. In the old days one could invoke nearly arbitrary code. Uncool!
KnownParameterConverters
for a complete list but
basically its Strings, Longs, Integers, Shorts, Bytes and so on.
IllegalArgumentAware
, then it will be told about bad parameters and the
exception will be ignored. All JiraWebActionSupport
actions implements IllegalArgumentAware
. JIRA is aware!
Introduced / changed as part of JRA-15664
Constructor Summary | |
---|---|
JiraSafeActionParameterSetter()
|
Method Summary | |
---|---|
void |
setSafeParameters(webwork.action.Action action,
java.util.Map<java.lang.String,?> webParameters)
This is called to set a map of parameters into an action. |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Constructor Detail |
---|
public JiraSafeActionParameterSetter()
Method Detail |
---|
public void setSafeParameters(webwork.action.Action action, java.util.Map<java.lang.String,?> webParameters)
SafeAction
and an assertions is made to that end.
action
- the action in playwebParameters
- the map of web request parameters
|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |