Package org.graylog2.security

Class SafeClasses

java.lang.Object

org.graylog2.security.SafeClasses

@Singleton
public class SafeClasses
extends Object

Adds a safety net for class loading.

Constructor Summary

Constructors

Constructor	Description
SafeClasses(Set<String> prefixes)

Method Summary

Modifier and Type	Method	Description
static SafeClasses	allGraylogInternal()
boolean	isSafeToLoad(String className)	Check if the class name is considered safe for loading by names from a potentially user-provided input.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SafeClasses

@Inject
public SafeClasses(@Named("safe_classes") @Nonnull
 Set<String> prefixes)

Method Details

allGraylogInternal

public static SafeClasses allGraylogInternal()

isSafeToLoad

public boolean isSafeToLoad(String className)

Check if the class name is considered safe for loading by names from a potentially user-provided input. Classes are considered safe if their fully qualified class name starts with any of the prefixes configured in Configuration.getSafeClasses().