org.pentaho.di.core.xml

Class XMLParserFactoryProducer

java.lang.Object

org.pentaho.di.core.xml.XMLParserFactoryProducer

public class XMLParserFactoryProducer
extends Object

Constructor Summary

Constructors

Constructor and Description
XMLParserFactoryProducer()

Method Summary

Modifier and Type	Method and Description
static DocumentBuilderFactory	createSecureDocBuilderFactory() Creates an instance of DocumentBuilderFactory class with enabled XMLConstants.FEATURE_SECURE_PROCESSING property.
static SAXParserFactory	createSecureSAXParserFactory() Creates an instance of SAXParserFactory class with enabled XMLConstants.FEATURE_SECURE_PROCESSING property.
static org.dom4j.io.SAXReader	getSAXReader(EntityResolver resolver)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XMLParserFactoryProducer

public XMLParserFactoryProducer()

Method Detail

createSecureDocBuilderFactory

public static DocumentBuilderFactory createSecureDocBuilderFactory()
                                                            throws ParserConfigurationException

Creates an instance of DocumentBuilderFactory class with enabled XMLConstants.FEATURE_SECURE_PROCESSING property. Enabling this feature prevents from some XXE attacks (e.g. XML bomb) See PPP-3506 for more details.

Throws:

ParserConfigurationException - if feature can't be enabled

createSecureSAXParserFactory

public static SAXParserFactory createSecureSAXParserFactory()
                                                     throws SAXNotSupportedException,
                                                            SAXNotRecognizedException,
                                                            ParserConfigurationException

Creates an instance of SAXParserFactory class with enabled XMLConstants.FEATURE_SECURE_PROCESSING property. Enabling this feature prevents from some XXE attacks (e.g. XML bomb)

Throws:

ParserConfigurationException - if a parser cannot be created which satisfies the requested configuration.

SAXNotRecognizedException - When the underlying XMLReader does not recognize the property name.

SAXNotSupportedException - When the underlying XMLReader recognizes the property name but doesn't support the property.

getSAXReader

public static org.dom4j.io.SAXReader getSAXReader(EntityResolver resolver)