Class EnumeratingWhitelist
java.lang.Object
org.jenkinsci.plugins.scriptsecurity.sandbox.Whitelist
org.jenkinsci.plugins.scriptsecurity.sandbox.whitelists.EnumeratingWhitelist
- Direct Known Subclasses:
StaticWhitelist
A whitelist based on listing signatures and searching them. Lists of signatures should not change
from invocation to invocation.
If that's a need it is better to directly extend Whitelist and roll a custom implementation OR
extend ProxyWhitelist and add some custom delegates.
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic classstatic classstatic final classstatic class -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected abstract List<EnumeratingWhitelist.FieldSignature>static @NotNull Stringstatic @NotNull Stringprotected abstract List<EnumeratingWhitelist.MethodSignature>protected abstract List<EnumeratingWhitelist.NewSignature>final booleanpermitsConstructor(Constructor<?> constructor, Object[] args) final booleanpermitsFieldGet(Field field, Object receiver) final booleanpermitsFieldSet(Field field, Object receiver, Object value) final booleanpermitsMethod(Method method, Object receiver, Object[] args) Checks whether a given virtual method may be invoked.final booleanpermitsStaticFieldGet(Field field) final booleanpermitsStaticFieldSet(Field field, Object value) final booleanpermitsStaticMethod(Method method, Object[] args) protected abstract List<EnumeratingWhitelist.FieldSignature>protected abstract List<EnumeratingWhitelist.MethodSignature>
-
Constructor Details
-
EnumeratingWhitelist
public EnumeratingWhitelist()
-
-
Method Details
-
methodSignatures
-
newSignatures
-
staticMethodSignatures
-
fieldSignatures
-
staticFieldSignatures
-
permitsMethod
Description copied from class:WhitelistChecks whether a given virtual method may be invoked.Note that
methodshould not be implementing or overriding a method in a supertype; in such a case the caller must pass that supertype method instead. In other words, call site selection is the responsibility of the caller (such asStandardGroovySandbox), not the whitelist.- Specified by:
permitsMethodin classWhitelist- Parameters:
method- a method defined in the JVMreceiver-this, the receiver of the method callargs- zero or more arguments- Returns:
- true to allow the method to be called, false to reject it
-
permitsConstructor
- Specified by:
permitsConstructorin classWhitelist
-
permitsStaticMethod
- Specified by:
permitsStaticMethodin classWhitelist
-
permitsFieldGet
- Specified by:
permitsFieldGetin classWhitelist
-
permitsFieldSet
- Specified by:
permitsFieldSetin classWhitelist
-
permitsStaticFieldGet
- Specified by:
permitsStaticFieldGetin classWhitelist
-
permitsStaticFieldSet
- Specified by:
permitsStaticFieldSetin classWhitelist
-
getName
-
getName
-