Package eu.europa.ec.taxud.validation.utils

Class XxeHelper

java.lang.Object

eu.europa.ec.taxud.validation.utils.XxeHelper

public final class XxeHelper
extends Object

Provide useful stuff to prevent XXE attack.

Version:

$Revision$

Method Summary

Modifier and Type	Method	Description
static void	addXxeSecurity(SAXParserFactory saxParserFactory)	Prevents XXE attack for a given SAXParserFactory object.
static void	addXxeSecurity(XMLInputFactory xmlInputFactory)	Prevents XXE attack for a given XMLInputFactory object.
static void	addXxeSecurity(SAXTransformerFactory saxTransformerFactory)	Prevents XXE attack for a given SAXTransformerFactory object.
static void	addXxeSecurity(TransformerFactory transformerFactory)	Prevents XXE attack for a given TransformerFactory object.
static void	addXxeSecurity(SchemaFactory schemaFactory)	Prevents XXE attack for a given SchemaFactory object.
static void	addXxeSecurity(Validator validator)	Prevents XXE attack for a given Validator object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

addXxeSecurity

public static void addXxeSecurity(XMLInputFactory xmlInputFactory)

Prevents XXE attack for a given XMLInputFactory object.

Parameters:

xmlInputFactory - The XMLInputFactory object.

addXxeSecurity

public static void addXxeSecurity(TransformerFactory transformerFactory)

Prevents XXE attack for a given TransformerFactory object.

Parameters:

transformerFactory - The TransformerFactory object.

addXxeSecurity

public static void addXxeSecurity(Validator validator)
                           throws SAXNotRecognizedException,
SAXNotSupportedException

Prevents XXE attack for a given Validator object.

Parameters:

validator - The Validator object.

Throws:

SAXNotRecognizedException - in case of exception

SAXNotSupportedException - in case of exception

addXxeSecurity

public static void addXxeSecurity(SchemaFactory schemaFactory)
                           throws SAXNotRecognizedException,
SAXNotSupportedException

Prevents XXE attack for a given SchemaFactory object.

Parameters:

schemaFactory - The SchemaFactory object.

Throws:

SAXNotRecognizedException - in case of exception

SAXNotSupportedException - in case of exception

addXxeSecurity

public static void addXxeSecurity(SAXTransformerFactory saxTransformerFactory)

Prevents XXE attack for a given SAXTransformerFactory object.

Parameters:

saxTransformerFactory - The SAXTransformerFactory object.

addXxeSecurity

public static void addXxeSecurity(SAXParserFactory saxParserFactory)
                           throws SAXNotSupportedException,
SAXNotRecognizedException,
ParserConfigurationException

Prevents XXE attack for a given SAXParserFactory object.

Parameters:

saxParserFactory - The SAXParserFactory object.

Throws:

SAXNotSupportedException - in case of exception

SAXNotRecognizedException - in case of exception

ParserConfigurationException - in case of exception