org.mule.util

Class XMLSecureFactories

java.lang.Object

org.mule.util.XMLSecureFactories

public class XMLSecureFactories
extends Object

Provide XML parser factories configured to avoid XXE and BL attacks according to global configuration (safe by default)

Field Summary

Fields

Modifier and Type	Field and Description
static String	EXPAND_ENTITIES_PROPERTY
static String	EXTERNAL_ENTITIES_PROPERTY
protected Log	logger

Constructor Summary

Constructors

Constructor and Description
XMLSecureFactories()

Method Summary

Methods

Modifier and Type	Method and Description
DocumentBuilderFactory	createDocumentBuilderFactory()
SAXParserFactory	createSaxParserFactory()
static XMLSecureFactories	createWithConfig(Boolean externalEntities, Boolean expandEntities)
XMLInputFactory	createXmlInputFactory()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected final Log logger

EXTERNAL_ENTITIES_PROPERTY

public static final String EXTERNAL_ENTITIES_PROPERTY

See Also:

Constant Field Values

EXPAND_ENTITIES_PROPERTY

public static final String EXPAND_ENTITIES_PROPERTY

See Also:

Constant Field Values

Constructor Detail

XMLSecureFactories

public XMLSecureFactories()

Method Detail

createWithConfig

public static XMLSecureFactories createWithConfig(Boolean externalEntities,
                                  Boolean expandEntities)

createDocumentBuilderFactory

public DocumentBuilderFactory createDocumentBuilderFactory()

createSaxParserFactory

public SAXParserFactory createSaxParserFactory()

createXmlInputFactory

public XMLInputFactory createXmlInputFactory()