Package com.atlassian.confluence.impl.struts

Class ConfluenceSecurityMemberAccess

java.lang.Object
org.apache.struts2.ognl.SecurityMemberAccess
com.atlassian.security.serialblocklist.struts.BlocklistAwareSecureMembersAccess
com.atlassian.confluence.impl.struts.ConfluenceSecurityMemberAccess
All Implemented Interfaces:
ognl.MemberAccess
public class ConfluenceSecurityMemberAccess extends com.atlassian.security.serialblocklist.struts.BlocklistAwareSecureMembersAccess
The purpose of this class it to define Confluence specific behaviour for Struts SecurityMemberAccess class.

  • Constructor Summary

    Constructors
    Constructor
    Description
    ConfluenceSecurityMemberAccess(org.apache.struts2.ognl.ProviderAllowlist providerAllowlist, org.apache.struts2.ognl.ThreadAllowlist threadAllowlist)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    protected boolean
    isClassAllowlisted(Class<?> clazz)
     

    Methods inherited from class com.atlassian.security.serialblocklist.struts.BlocklistAwareSecureMembersAccess

    isAccessible

    Methods inherited from class org.apache.struts2.ognl.SecurityMemberAccess

    checkAllowlist, checkDefaultPackageAccess, checkExclusionList, checkProxyMemberAccess, checkProxyObjectAccess, checkPublicMemberAccess, checkStaticFieldAccess, checkStaticMethodAccess, isAcceptableProperty, isAccepted, isClassBelongsToPackages, isClassExcluded, isExcluded, isExcludedPackageNamePatterns, isExcludedPackageNames, isPackageExcluded, restore, setup, toPackageName, useAcceptProperties, useAllowlistClasses, useAllowlistPackageNames, useAllowStaticFieldAccess, useDevMode, useDevModeExcludedClasses, useDevModeExcludedPackageExemptClasses, useDevModeExcludedPackageNamePatterns, useDevModeExcludedPackageNames, useDisallowDefaultPackageAccess, useDisallowProxyMemberAccess, useDisallowProxyObjectAccess, useEnforceAllowlistEnabled, useExcludedClasses, useExcludedPackageExemptClasses, useExcludedPackageNamePatterns, useExcludedPackageNames, useExcludeProperties

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • ConfluenceSecurityMemberAccess

      public ConfluenceSecurityMemberAccess(org.apache.struts2.ognl.ProviderAllowlist providerAllowlist, org.apache.struts2.ognl.ThreadAllowlist threadAllowlist)

  • Method Details

    • isClassAllowlisted

      protected boolean isClassAllowlisted(Class<?> clazz)
      Overrides:
      isClassAllowlisted in class org.apache.struts2.ognl.SecurityMemberAccess