SecureIntrospector (XWiki Commons - Velocity 14.10.7 API)

java.lang.Object
- org.apache.velocity.util.introspection.IntrospectorBase
- - org.apache.velocity.util.introspection.Introspector
  - - org.apache.velocity.util.introspection.SecureIntrospectorImpl
    - - org.xwiki.velocity.introspection.SecureIntrospector

All Implemented Interfaces:

org.apache.velocity.util.introspection.SecureIntrospectorControl
```
public class SecureIntrospector
extends org.apache.velocity.util.introspection.SecureIntrospectorImpl
```
SecureIntrospectorImpl is way too restrictive with allowed Class methods.

Since:

5.4RC1

Version:

$Id: 4be697e8a6a6ac25f57014335f712e315db0f7b7 $

Field Summary
- Fields inherited from class org.apache.velocity.util.introspection.IntrospectorBase
  log

Constructor Summary

Constructors
Constructor Description

SecureIntrospector(String[] badClasses, String[] badPackages, org.slf4j.Logger log)

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method	Description
`boolean`	`checkObjectExecutePermission(Class clazz, String methodName)`
`protected Map<Class,Set<String>>`	`getWhitelistedMethods()`

Methods inherited from class org.apache.velocity.util.introspection.SecureIntrospectorImpl
getMethod

Methods inherited from class org.apache.velocity.util.introspection.IntrospectorBase
getField, getIntrospectorCache

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- Constructor Detail
  - SecureIntrospector
```
public SecureIntrospector(String[] badClasses,
                          String[] badPackages,
                          org.slf4j.Logger log)
```
    Parameters:
    
    badClasses - forbidden classes
    
    badPackages - forbidden packages
    
    log - the log
- Method Detail
  - getWhitelistedMethods
```
protected Map<Class,Set<String>> getWhitelistedMethods()
```
    Returns:
    
    a copy of the whitelisted methods used in this introspector.
  - checkObjectExecutePermission
```
public boolean checkObjectExecutePermission(Class clazz,
                                            String methodName)
```
    Specified by:
    
    checkObjectExecutePermission in interface org.apache.velocity.util.introspection.SecureIntrospectorControl
    
    Overrides:
    
    checkObjectExecutePermission in class org.apache.velocity.util.introspection.SecureIntrospectorImpl