org.granite.messaging.amf.io

Interface AMF3DeserializerSecurizer

All Known Implementing Classes:

RegexAMF3DeserializerSecurizer

public interface AMF3DeserializerSecurizer

Implementations of this interface are used at deserialization time in order to control arbitrary class instantiation that can result in potential security exploits.

Author:

Franck WOLFF

Method Summary

Methods

Modifier and Type	Method and Description
boolean	allowInstantiation(String className) Check if it safe to instantiate the class denoted by the className parameter.
String	getParam() Returns the string that is currently used for this securizer configuration.
void	setParam(String param) An arbitrary string that may be used in order to configure this securizer.

Method Detail

allowInstantiation

boolean allowInstantiation(String className)

Check if it safe to instantiate the class denoted by the className parameter.

Parameters:

className - the class name to check.

Returns:

true if it is safe to instantiate the given class, false otherwise.

setParam

void setParam(String param)

An arbitrary string that may be used in order to configure this securizer.

Parameters:

param - a string used in configuring this securizer.

getParam

String getParam()

Returns the string that is currently used for this securizer configuration.

Returns:

the string that is currently used for this securizer configuration.