Interface TagInspector

  • All Known Implementing Classes:
    UnTrustedTagInspector

    public interface TagInspector
    Check if the global tags are allowed (the local tags are always allowed). It should control the classes to create to prevent possible remote code invocation when the data comes from untrusted source. The standard tags are always allowed (https://yaml.org/type/index.html)
    • Method Detail

      • isGlobalTagAllowed

        boolean isGlobalTagAllowed​(Tag tag)
        Check
        Parameters:
        tag - - the global tag to check
        Returns:
        true when the custom global tag is allowed to create a custom Java instance