Class SecureXml
java.lang.Object
io.jenkins.plugins.xmleditor.core.parse.SecureXml
The only place where JAXP factories are created. Every factory uses the JDK built-in implementation (not whatever
happens to be on the classpath) with secure processing on, no external entities, no external DTDs or schemas and
explicit entity expansion limits. A DOCTYPE is allowed, because real project files contain one, but nothing it
references is ever loaded.
-
Method Summary
Modifier and TypeMethodDescriptionstatic DocumentBuilderA builder used only to create empty documents (the XPath shadow DOM); it never parses input.static SAXParserstatic SchemaFactoryA schema factory that loads nothing on its own:xs:include/xs:importare only resolved through the caller's resource resolver, which must supply the content.static XPathFactory
-
Method Details
-
newSaxParser
-
newDocumentBuilder
A builder used only to create empty documents (the XPath shadow DOM); it never parses input.- Throws:
ParserConfigurationException
-
newXPathFactory
-
newSchemaFactory
A schema factory that loads nothing on its own:xs:include/xs:importare only resolved through the caller's resource resolver, which must supply the content.- Throws:
SAXException
-