Package org.geotools.xml
Class XMLUtils
Object
XMLUtils
XML related utilities not otherwise found in base libraries
- Author:
- Andrea Aime - GeoSolutions
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionstatic void
Tests whether the TransformerFactory and SchemaFactory implementations support JAXP 1.5 properties to protect against XML external entity injection (XXE) attacks.static QName
qName
(String name, NamespaceSupport namespaces) Creates a qualified name from a string by parsing out the colon as the prefix / local separator.static String
Checks the string for XML invalid chars, and in case any is found, create a copy with the invalid ones removed.
-
Constructor Details
-
XMLUtils
public XMLUtils()
-
-
Method Details
-
checkSupportForJAXP15Properties
public static void checkSupportForJAXP15Properties()Tests whether the TransformerFactory and SchemaFactory implementations support JAXP 1.5 properties to protect against XML external entity injection (XXE) attacks. The internal JDK XML processors starting with JDK 7u40 would support these properties but outdated versions of XML libraries (e.g., Xalan, Xerces) that do not support these properties may be included in GeoServer's classpath or provided by the web application server. This method is intended to support using third-party libraries (e.g., Hazelcast) that use these properties internally.- Throws:
IllegalStateException
- if the JAXP 1.5 properties are not supported or if there was an error checking for JAXP 1.5 support
-
removeXMLInvalidChars
Checks the string for XML invalid chars, and in case any is found, create a copy with the invalid ones removed. -
qName
Creates a qualified name from a string by parsing out the colon as the prefix / local separator.- Parameters:
name
- The possibly qualified name.namespaces
- The namespace prefix uri mappings.
-