Package org.sonar.java.se.checks

Interface XxeProperty

All Known Implementing Classes:

XxeProperty.AttributeDTD, XxeProperty.AttributeSchema, XxeProperty.AttributeStyleSheet, XxeProperty.FeatureDisallowDoctypeDecl, XxeProperty.FeatureExternalGeneralEntities, XxeProperty.FeatureIsSupportingExternalEntities, XxeProperty.FeatureLoadExternalDtd, XxeProperty.FeatureSupportDtd

public interface XxeProperty

A property is independently a XXE feature or XXE attribute

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static class	XxeProperty.AttributeDTD
static class	XxeProperty.AttributeSchema
static class	XxeProperty.AttributeStyleSheet
static class	XxeProperty.FeatureDisallowDoctypeDecl
static class	XxeProperty.FeatureExternalGeneralEntities
static class	XxeProperty.FeatureIsSupportingExternalEntities
static class	XxeProperty.FeatureLoadExternalDtd
static class	XxeProperty.FeatureSupportDtd
static class	XxeProperty.XxePropertyHolder

Field Summary

Fields

Modifier and Type	Field	Description
static String	UNSECURED_USE_EMPTY_STRING_TO_PROTECT_AGAINST_XXE

Method Summary

Modifier and Type	Method	Description
default boolean	isNamed(String name)
default boolean	isSecuring(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToEmptyString(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToFalse(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToNonEmptyString(SymbolicValue sv1, ExpressionTree arg1)
static boolean	isSetToTrue(SymbolicValue sv1, ExpressionTree arg1)
default boolean	isUnsecuring(SymbolicValue sv1, ExpressionTree arg1)
default Constraint	namedConstraint()
XxeProperty.XxePropertyHolder	properties()
default Constraint	securedConstraint()
default Constraint	unsecuredConstraint()

Field Detail

UNSECURED_USE_EMPTY_STRING_TO_PROTECT_AGAINST_XXE

static final String UNSECURED_USE_EMPTY_STRING_TO_PROTECT_AGAINST_XXE

See Also:

Constant Field Values

Method Detail

properties

XxeProperty.XxePropertyHolder properties()

isNamed

default boolean isNamed(String name)

securedConstraint

default Constraint securedConstraint()

namedConstraint

default Constraint namedConstraint()

isSecuring

default boolean isSecuring(@Nullable
                           SymbolicValue sv1,
                           ExpressionTree arg1)

unsecuredConstraint

default Constraint unsecuredConstraint()

isUnsecuring

default boolean isUnsecuring(@Nullable
                             SymbolicValue sv1,
                             ExpressionTree arg1)

isSetToEmptyString

static boolean isSetToEmptyString(@Nullable
                                  SymbolicValue sv1,
                                  ExpressionTree arg1)

isSetToNonEmptyString

static boolean isSetToNonEmptyString(@Nullable
                                     SymbolicValue sv1,
                                     ExpressionTree arg1)

isSetToFalse

static boolean isSetToFalse(@Nullable
                            SymbolicValue sv1,
                            ExpressionTree arg1)

isSetToTrue

static boolean isSetToTrue(@Nullable
                           SymbolicValue sv1,
                           ExpressionTree arg1)