Package org.wickedsource.docxstamper.el

Class NoOpEvaluationContextConfigurer

java.lang.Object
org.wickedsource.docxstamper.el.NoOpEvaluationContextConfigurer
All Implemented Interfaces:
EvaluationContextConfigurer
public class NoOpEvaluationContextConfigurer extends Object implements EvaluationContextConfigurer
EvaluationContextConfigurer that does no customization.

The NoOpEvaluationContextConfigurer is a configuration placeholder used to indicate the intention to keep the standard powerful features provided by the Spring framework's StandardEvaluationContext class.

StandardEvaluationContext is a powerful class by default, which can lead to potential security risks if not properly managed. This might include potential dangerous injections in the template.

This configurer does nothing to the StandardEvaluationContext class, and therefore all the unfiltered features are accessible. It should be used when there is a need to use the powerful features of the aforementioned class, and there is a trust that the template won't contain any dangerous injections.

Version:
${version}
Author:
Joseph Verron

  • Constructor Details

    • NoOpEvaluationContextConfigurer

      public NoOpEvaluationContextConfigurer()

  • Method Details

    • configureEvaluationContext

      public void configureEvaluationContext(org.springframework.expression.spel.support.StandardEvaluationContext context)
      Configures the provided StandardEvaluationContext.
      Specified by:
      configureEvaluationContext in interface EvaluationContextConfigurer
      Parameters:
      context - the StandardEvaluationContext to be configured, not null