Package org.apache.struts2.ognl

Class StrutsOgnlGuard

java.lang.Object
org.apache.struts2.ognl.StrutsOgnlGuard
All Implemented Interfaces:
OgnlGuard
public class StrutsOgnlGuard extends Object implements OgnlGuard
The default implementation of OgnlGuard.
Since:
6.4.0

  • Field Details

    • excludedNodeTypes

      protected Set<String> excludedNodeTypes

  • Constructor Details

    • StrutsOgnlGuard

      public StrutsOgnlGuard()

  • Method Details

    • useExcludedNodeTypes

      public void useExcludedNodeTypes(String excludedNodeTypes)

    • validateExcludedNodeTypes

      protected void validateExcludedNodeTypes(Set<String> incomingExcludedNodeTypes) throws ConfigurationException
      Throws:
      ConfigurationException

    • isRawExpressionBlocked

      public boolean isRawExpressionBlocked(String expr)
      Description copied from interface: OgnlGuard
      Determines whether an OGNL expression should be blocked based on validation done on only the raw expression, without parsing the tree.
      Specified by:
      isRawExpressionBlocked in interface OgnlGuard
      Parameters:
      expr - OGNL expression
      Returns:
      whether the expression should be blocked

    • isParsedTreeBlocked

      public boolean isParsedTreeBlocked(Object tree)
      Description copied from interface: OgnlGuard
      Determines whether a parsed OGNL tree should be blocked based on some validation rules.
      Specified by:
      isParsedTreeBlocked in interface OgnlGuard
      Parameters:
      tree - parsed OGNL tree
      Returns:
      whether the parsed tree should be blocked

    • skipTreeCheck

      protected boolean skipTreeCheck(ognl.Node tree)

    • recurseNodes

      protected boolean recurseNodes(ognl.Node node)

    • checkNode

      protected boolean checkNode(ognl.Node node)

    • containsExcludedNodeType

      protected boolean containsExcludedNodeType(ognl.Node node)