Package eu.europa.esig.dss.xades

Class EnforcedResolverFragment

  • public class EnforcedResolverFragment
extends org.apache.xml.security.utils.resolver.implementations.ResolverFragment

    • Field Summary

      • Fields inherited from class org.apache.xml.security.utils.resolver.ResourceResolverSpi

        properties

    • Method Summary

      Modifier and Type Method Description
      boolean checkValueForXpathInjection​(String xpathString)
      This method tests the xpath expression against injection.
      boolean engineCanResolveURI​(org.apache.xml.security.utils.resolver.ResourceResolverContext context)  

      • Methods inherited from class org.apache.xml.security.utils.resolver.implementations.ResolverFragment

        engineIsThreadSafe, engineResolveURI

      • Methods inherited from class org.apache.xml.security.utils.resolver.ResourceResolverSpi

        engineAddProperies, engineGetProperty, engineGetPropertyKeys, engineSetProperty, fixURI, understandsProperty

    • Constructor Detail

      • EnforcedResolverFragment

        public EnforcedResolverFragment()

    • Method Detail

      • engineCanResolveURI

        public boolean engineCanResolveURI​(org.apache.xml.security.utils.resolver.ResourceResolverContext context)
        Overrides:
        engineCanResolveURI in class org.apache.xml.security.utils.resolver.implementations.ResolverFragment

      • checkValueForXpathInjection

        public boolean checkValueForXpathInjection​(String xpathString)
        This method tests the xpath expression against injection. See https://www.owasp.org/index.php/XPATH_Injection_Java
        Parameters:
        xpathString - the xpath expression to be tested
        Returns:
        false if the xpath contains forbidden character or if the xpath cannot be decoded