Class UnTrustedTagInspector

  • All Implemented Interfaces:
    TagInspector

    public final class UnTrustedTagInspector
    extends java.lang.Object
    implements TagInspector
    TagInspector which does not allow to create any custom instance. It should not be used when the data comes from untrusted source to prevent possible remote code invocation.
    • Constructor Detail

      • UnTrustedTagInspector

        public UnTrustedTagInspector()
    • Method Detail

      • isGlobalTagAllowed

        public boolean isGlobalTagAllowed​(Tag tag)
        Allow none
        Specified by:
        isGlobalTagAllowed in interface TagInspector
        Parameters:
        tag - - the global tag to reject
        Returns:
        always return false