Package com.xml_project.morganaxproc.security

This package contains the classes of MorganaXProc's security management system.

See:
Description

Class Summary

StandardXProcSecurityManager	This is the StandardXProcSecurityManager used on default by MorganaXProc.
XProcSecurityManager	This class is used to implement security management to protect your system against possible threats from running third party XProc pipelines or while developing new XProc pipeline.

Enum Summary

XProcSecurityManager.Operations	This enumeration lists the individual operation for which security controls will be performed.
XProcSecurityManager.Strategies	The basic security strategies implemented by XProcSecurityManager

Exception Summary

XProcSecurityException

An Exception of this class is raised, when a XProc pipeline attempts to access a resource that is not allowed by the currently used security manager.

Package com.xml_project.morganaxproc.security Description

This package contains the classes of MorganaXProc's security management system.

The core class here is XProcSecurityManager which is called every time before a security relevant action is executed. If a violation of the security rules layed out in XProcSecurityManager is found, a XProcSecurityException is raised.

The class StandardSecurityManager is used by MorganaXProc on default. It is an authoritarian manager, so everything is forbidden except explicitly allowed. Allowed are:

• Reading ressources from the "user.home" folder with scheme "file".
• Running and importing pipelines from any source available with scheme "file".
• HTTP-request with method 'get' for any source.