jenkins.util.xml

Class XMLUtils

java.lang.Object

jenkins.util.xml.XMLUtils

@Restricted(value=org.kohsuke.accmod.restrictions.NoExternalUse.class)
public final class XMLUtils
extends Object

Utilities useful when working with various XML types.

Constructor Summary

Constructors

Constructor and Description
XMLUtils()

Method Summary

Modifier and Type	Method and Description
static void	safeTransform(Source source, Result out) Transform the source to the output in a manner that is protected against XXE attacks.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XMLUtils

public XMLUtils()

Method Detail

safeTransform

public static void safeTransform(@Nonnull
                                 Source source,
                                 @Nonnull
                                 Result out)
                          throws TransformerException,
                                 SAXException

Transform the source to the output in a manner that is protected against XXE attacks. If the transform can not be completed safely then an IOException is thrown. Note - to turn off safety set the system property disableXXEPrevention to true.

Parameters:

source - The XML input to transform. - This should be a StreamSource or a SAXSource in order to be able to prevent XXE attacks.

out - The Result of transforming the source.

Throws:

TransformerException

SAXException