Package org.eclipse.jetty.server
Class AllowedResourceAliasChecker
java.lang.Object
org.eclipse.jetty.util.component.AbstractLifeCycle
org.eclipse.jetty.server.AllowedResourceAliasChecker
- All Implemented Interfaces:
ContextHandler.AliasCheck
,LifeCycle
- Direct Known Subclasses:
SymlinkAllowedResourceAliasChecker
public class AllowedResourceAliasChecker
extends AbstractLifeCycle
implements ContextHandler.AliasCheck
This will approve any alias to anything inside of the ContextHandler
s resource base which
is not protected by a protected target as defined by ContextHandler.getProtectedTargets()
at start.
Aliases approved by this may still be able to bypass SecurityConstraints, so this class would need to be extended to enforce any additional security constraints that are required.
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionprivate class
Nested classes/interfaces inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle
AbstractLifeCycle.AbstractLifeCycleListener
Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.LifeCycle
LifeCycle.Listener
-
Field Summary
FieldsModifier and TypeFieldDescriptionprotected Path
private final ContextHandler
protected static final LinkOption[]
private static final Logger
protected static final LinkOption[]
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected boolean
boolean
Check an aliasprotected void
doStart()
protected void
doStop()
protected ContextHandler
protected Path
private static Path
getRealPath
(Path path) protected void
protected boolean
protected boolean
isSameFile
(Path path1, Path path2) toString()
Methods inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle
addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, setStopTimeout, start, stop
-
Field Details
-
LOG
-
FOLLOW_LINKS
-
NO_FOLLOW_LINKS
-
_contextHandler
-
_protected
-
_listener
-
_base
-
-
Constructor Details
-
AllowedResourceAliasChecker
- Parameters:
contextHandler
- the context handler to use.
-
-
Method Details
-
getContextHandler
-
initialize
protected void initialize() -
doStart
- Overrides:
doStart
in classAbstractLifeCycle
- Throws:
Exception
-
doStop
- Overrides:
doStop
in classAbstractLifeCycle
- Throws:
Exception
-
check
Description copied from interface:ContextHandler.AliasCheck
Check an alias- Specified by:
check
in interfaceContextHandler.AliasCheck
- Parameters:
pathInContext
- The path the aliased resource was created forresource
- The aliased resourced- Returns:
- True if the resource is OK to be served.
-
check
-
isAllowed
-
isSameFile
-
getRealPath
-
getPath
-
toString
- Overrides:
toString
in classAbstractLifeCycle
-