Package com.inductiveautomation.ignition.common

Class XMLUtil

java.lang.Object

com.inductiveautomation.ignition.common.XMLUtil

public class XMLUtil
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final DateFormat	dateFormat

Constructor Summary

Constructors

Constructor	Description
XMLUtil()

Method Summary

Modifier and Type	Method	Description
static void	closeElement(PrintWriter out, String element)	Writes </element>
static DocumentBuilderFactory	createSafeDocumentBuilderFactory()	The createSafeDocumentBuilderFactory() method returns a new DocumentBuilderFactory Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.
static SAXParserFactory	createSafeSAXParserFactory()	The createSafeSAXParserFactory() method returns a new DocumentBuilderFactory Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.
static TransformerFactory	createSafeTransformerFactory()
static XMLReader	createSafeXMLReader()	The createSafeXMLReader() method returns a new XMLReader Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.
static XMLReader	createSafeXMLReader(String className)	The createSafeXMLReader() method returns a new XMLReader Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.
static void	main(String[] args)
static void	openElement(PrintWriter out, String element)	Writes <element>
static void	printXMLHead(PrintWriter out)
static void	printXMLHead(Writer out)
static void	printXMLHead(StringBuilder out)
static void	printXMLHead(Formatter out)
static String	quoteCharacters(String s)
static void	setSafetyFeatures(XMLReader reader)	Sets safety features on the provided XMLReader instance
static void	writeElement(PrintWriter out, String element, String contents)	Writes <element>contents</element> , quoting the contents.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

dateFormat

public static final DateFormat dateFormat

Constructor Details

XMLUtil

public XMLUtil()

Method Details

createSafeDocumentBuilderFactory

public static DocumentBuilderFactory createSafeDocumentBuilderFactory()

The createSafeDocumentBuilderFactory() method returns a new DocumentBuilderFactory Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.

See: https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing for more info

createSafeTransformerFactory

public static TransformerFactory createSafeTransformerFactory()

createSafeSAXParserFactory

public static SAXParserFactory createSafeSAXParserFactory()

The createSafeSAXParserFactory() method returns a new DocumentBuilderFactory Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.

See: https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing for more info

createSafeXMLReader

public static XMLReader createSafeXMLReader()
                                     throws SAXException

The createSafeXMLReader() method returns a new XMLReader Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.

See: https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#xmlreader for more info

Calls XMLReaderFactory.createXMLReader()

Throws:

SAXException

createSafeXMLReader

public static XMLReader createSafeXMLReader(String className)
                                     throws SAXException

The createSafeXMLReader() method returns a new XMLReader Instance that has been configured to prevent XXE attacks possible through weakly configured XML parsers processing external entities.

See: https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#xmlreader for more info

Calls XMLReaderFactory.createXMLReader(String) and provides the given className

Throws:

SAXException

setSafetyFeatures

public static void setSafetyFeatures(XMLReader reader)

Sets safety features on the provided XMLReader instance

See: https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#xmlreader for more info

printXMLHead

public static void printXMLHead(Writer out)
                         throws IOException

Throws:

IOException

printXMLHead

public static void printXMLHead(PrintWriter out)

printXMLHead

public static void printXMLHead(Formatter out)

printXMLHead

public static void printXMLHead(StringBuilder out)

openElement

public static void openElement(PrintWriter out,
 String element)

Writes <element>

closeElement

public static void closeElement(PrintWriter out,
 String element)

Writes </element>

writeElement

public static void writeElement(PrintWriter out,
 String element,
 String contents)

Writes <element>contents</element> , quoting the contents. If contents is null, writes <element/>

main

public static void main(String[] args)

quoteCharacters

public static String quoteCharacters(String s)