Package org.apache.struts2.ognl
Class StrutsOgnlGuard
java.lang.Object
org.apache.struts2.ognl.StrutsOgnlGuard
- All Implemented Interfaces:
OgnlGuard
The default implementation of
OgnlGuard.- Since:
- 6.4.0
-
Field Summary
FieldsFields inherited from interface org.apache.struts2.ognl.OgnlGuard
EXPR_BLOCKED -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected booleancheckNode(ognl.Node node) protected booleancontainsExcludedNodeType(ognl.Node node) booleanisParsedTreeBlocked(Object tree) Determines whether a parsed OGNL tree should be blocked based on some validation rules.booleanisRawExpressionBlocked(String expr) Determines whether an OGNL expression should be blocked based on validation done on only the raw expression, without parsing the tree.protected booleanrecurseNodes(ognl.Node node) protected booleanskipTreeCheck(ognl.Node tree) voiduseExcludedNodeTypes(String excludedNodeTypes) protected voidvalidateExcludedNodeTypes(Set<String> incomingExcludedNodeTypes) Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface org.apache.struts2.ognl.OgnlGuard
isBlocked, parseExpression
-
Field Details
-
excludedNodeTypes
-
-
Constructor Details
-
StrutsOgnlGuard
public StrutsOgnlGuard()
-
-
Method Details
-
useExcludedNodeTypes
-
validateExcludedNodeTypes
protected void validateExcludedNodeTypes(Set<String> incomingExcludedNodeTypes) throws ConfigurationException - Throws:
ConfigurationException
-
isRawExpressionBlocked
Description copied from interface:OgnlGuardDetermines whether an OGNL expression should be blocked based on validation done on only the raw expression, without parsing the tree.- Specified by:
isRawExpressionBlockedin interfaceOgnlGuard- Parameters:
expr- OGNL expression- Returns:
- whether the expression should be blocked
-
isParsedTreeBlocked
Description copied from interface:OgnlGuardDetermines whether a parsed OGNL tree should be blocked based on some validation rules.- Specified by:
isParsedTreeBlockedin interfaceOgnlGuard- Parameters:
tree- parsed OGNL tree- Returns:
- whether the parsed tree should be blocked
-
skipTreeCheck
protected boolean skipTreeCheck(ognl.Node tree) -
recurseNodes
protected boolean recurseNodes(ognl.Node node) -
checkNode
protected boolean checkNode(ognl.Node node) -
containsExcludedNodeType
protected boolean containsExcludedNodeType(ognl.Node node)
-