Package org.apache.batik.bridge
Class DefaultScriptSecurity
- java.lang.Object
-
- org.apache.batik.bridge.DefaultScriptSecurity
-
- All Implemented Interfaces:
ScriptSecurity
public class DefaultScriptSecurity extends java.lang.Object implements ScriptSecurity
Default implementation for theScriptSecurity
interface. It allows all types of scripts to be loaded, but only if they come from the same server as the document they are included into.
-
-
Field Summary
Fields Modifier and Type Field Description static java.lang.String
DATA_PROTOCOL
static java.lang.String
ERROR_CANNOT_ACCESS_DOCUMENT_URL
Message when trying to load a script file and the Document does not have a URLstatic java.lang.String
ERROR_SCRIPT_FROM_DIFFERENT_URL
Message when trying to load a script file from a server different than the one of the document.protected java.lang.SecurityException
se
The exception is built in the constructor and thrown if not null and the checkLoadScript method is called.
-
Constructor Summary
Constructors Constructor Description DefaultScriptSecurity(java.lang.String scriptType, ParsedURL scriptURL, ParsedURL docURL)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
checkLoadScript()
Controls whether the script should be loaded or not.
-
-
-
Field Detail
-
DATA_PROTOCOL
public static final java.lang.String DATA_PROTOCOL
- See Also:
- Constant Field Values
-
ERROR_CANNOT_ACCESS_DOCUMENT_URL
public static final java.lang.String ERROR_CANNOT_ACCESS_DOCUMENT_URL
Message when trying to load a script file and the Document does not have a URL- See Also:
- Constant Field Values
-
ERROR_SCRIPT_FROM_DIFFERENT_URL
public static final java.lang.String ERROR_SCRIPT_FROM_DIFFERENT_URL
Message when trying to load a script file from a server different than the one of the document.- See Also:
- Constant Field Values
-
se
protected java.lang.SecurityException se
The exception is built in the constructor and thrown if not null and the checkLoadScript method is called.
-
-
Constructor Detail
-
DefaultScriptSecurity
public DefaultScriptSecurity(java.lang.String scriptType, ParsedURL scriptURL, ParsedURL docURL)
- Parameters:
scriptType
- type of script, as found in the type attribute of the <script> element.scriptURL
- url for the script, as defined in the script's xlink:href attribute. If that attribute was empty, then this parameter should be nulldocURL
- url for the document into which the script was found.
-
-
Method Detail
-
checkLoadScript
public void checkLoadScript()
Controls whether the script should be loaded or not.- Specified by:
checkLoadScript
in interfaceScriptSecurity
- Throws:
java.lang.SecurityException
- if the script should not be loaded.
-
-