com.neurosys.cluzo.adapters

Class RedundantFileExtSecurityAdapter

java.lang.Object

com.neurosys.cluzo.adapters.WhiteBlackExpressionSecurityAdapter

com.neurosys.cluzo.adapters.RedundantFileExtSecurityAdapter

All Implemented Interfaces:

SecurityAdapter<String>

public class RedundantFileExtSecurityAdapter
extends WhiteBlackExpressionSecurityAdapter

Block access to files

Author:

Arjun Dhar

Field Summary

Fields

Modifier and Type	Field and Description
static String	BLACK_URL_REGEX_PROP
static String	WHITE_URL_REGEX_PROP

Fields inherited from class com.neurosys.cluzo.adapters.WhiteBlackExpressionSecurityAdapter

blackRegExPattern, whiteRegExPattern

Fields inherited from interface com.neurosys.cluzo.domain.SecurityAdapter

REGEX_PROP_FILE

Constructor Summary

Constructors

Constructor and Description
RedundantFileExtSecurityAdapter()

Method Summary

Modifier and Type	Method and Description
protected void	processInvalidQuery(Data<String> input)
protected void	processNameValue(String name, String value) Used by WhiteBlackExpressionSecurityAdapter.processParams(Data) In the case of File matching, if the value is not a ref to a file, ignore else Match it against the RegEx
void	validate(Data<String> input) Check if the input is safe or not When used in a chained or a SecurityContext with other SecurityAdapters then the Adapters throwing a OperationNotSupportedException will be ignored.

Methods inherited from class com.neurosys.cluzo.adapters.WhiteBlackExpressionSecurityAdapter

getBlackRegExPattern, getWhiteRegExPattern, processParams, sanitize, setBlackRegExPattern, setWhiteRegExPattern, validateAgainstBlackRegEx, validateAgainstWhiteRegEx

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

BLACK_URL_REGEX_PROP

public static final String BLACK_URL_REGEX_PROP

See Also:

Constant Field Values

WHITE_URL_REGEX_PROP

public static final String WHITE_URL_REGEX_PROP

See Also:

Constant Field Values

Constructor Detail

RedundantFileExtSecurityAdapter

public RedundantFileExtSecurityAdapter()
                                throws IOException

Throws:

IOException

Method Detail

validate

public void validate(Data<String> input)
              throws SecurityException,
                     IOException

Description copied from interface: SecurityAdapter

Check if the input is safe or not
When used in a chained or a SecurityContext with other SecurityAdapters then the Adapters throwing a OperationNotSupportedException will be ignored.

Specified by:

validate in interface SecurityAdapter<String>

Overrides:

validate in class WhiteBlackExpressionSecurityAdapter

Parameters:

input - as Data

Throws:

SecurityException - is its is not safe. This is to provide additional details about the failure that te return param cannot.

IOException - for any type of setup, reading, infra related issue with files/configs

processNameValue

protected void processNameValue(String name,
                                String value)
                         throws SecurityException,
                                IOException

Used by WhiteBlackExpressionSecurityAdapter.processParams(Data)
In the case of File matching, if the value is not a ref to a file, ignore else Match it against the RegEx

Overrides:

processNameValue in class WhiteBlackExpressionSecurityAdapter

Parameters:

name -

value -

Throws:

SecurityException

IOException

processInvalidQuery

protected void processInvalidQuery(Data<String> input)
                            throws SecurityException,
                                   IOException

Overrides:

processInvalidQuery in class WhiteBlackExpressionSecurityAdapter

Throws:

SecurityException

IOException