Package org.geotools.util

Class PreventLocalEntityResolver

Object

PreventLocalEntityResolver

All Implemented Interfaces:

Serializable, EntityResolver3, EntityResolver, EntityResolver2

public class PreventLocalEntityResolver
extends Object
implements EntityResolver3, Serializable

EntityResolver implementation to prevent use external entity resolution to local files.

When parsing an XML entity reference to a local file a SAXException is thrown, which can be handled appropriately.

For a more restrictive EntityResolver DefaultEntityResolver is recommended.

Author:

Davide Savazzi - geo-solutions.it

See Also:

• Serialized Form

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ERROR_MESSAGE_BASE	Prefix used for SAXException message
static final PreventLocalEntityResolver	INSTANCE	Singleton instance of PreventLocalEntityResolver
protected static final Logger	LOGGER

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	PreventLocalEntityResolver()

Method Summary

Modifier and Type	Method	Description
String	getAccess()	PreventLocalEntityResolver provides access "http" and internal "jar:file,jar:nested,vfs" protocols.
InputSource	getExternalSubset(String name, String baseURI)
InputSource	resolveEntity(String publicId, String systemId)
InputSource	resolveEntity(String name, String publicId, String baseURI, String systemId)	Tells the parser to resolve the systemId against the baseURI and read the entity text from that resulting absolute URI.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ERROR_MESSAGE_BASE

public static final String ERROR_MESSAGE_BASE

Prefix used for SAXException message

See Also:

• Constant Field Values

LOGGER

protected static final Logger LOGGER

INSTANCE

public static final PreventLocalEntityResolver INSTANCE

Singleton instance of PreventLocalEntityResolver

Constructor Details

PreventLocalEntityResolver

protected PreventLocalEntityResolver()

Method Details

getAccess

public String getAccess()

PreventLocalEntityResolver provides access "http" and internal "jar:file,jar:nested,vfs" protocols.

Specified by:

getAccess in interface EntityResolver3

Returns:

"http,jar:file,jar:nested,vfs"

resolveEntity

public InputSource resolveEntity(String publicId,
 String systemId)
                          throws SAXException,
IOException

Specified by:

resolveEntity in interface EntityResolver

Throws:

SAXException

IOException

getExternalSubset

public InputSource getExternalSubset(String name,
 String baseURI)
                              throws SAXException,
IOException

Specified by:

getExternalSubset in interface EntityResolver2

Throws:

SAXException

IOException

resolveEntity

public InputSource resolveEntity(String name,
 String publicId,
 String baseURI,
 String systemId)
                          throws SAXException,
IOException

Tells the parser to resolve the systemId against the baseURI and read the entity text from that resulting absolute URI. Note that because the older DefaultHandler.resolveEntity(), method is overridden to call this one, this method may sometimes be invoked with null name and baseURI, and with the systemId already absolutized.

Specified by:

resolveEntity in interface EntityResolver2

Throws:

SAXException

IOException