content: /*
   *  This file is part of AndroidIDE.
   *
   *  AndroidIDE is free software: you can redistribute it and/or modify
   *  it under the terms of the GNU General Public License as published by
   *  the Free Software Foundation, either version 3 of the License, or
   *  (at your option) any later version.
   *
   *  AndroidIDE is distributed in the hope that it will be useful,
   *  but WITHOUT ANY WARRANTY; without even the implied warranty of
   *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   *  GNU General Public License for more details.
   *
   *  You should have received a copy of the GNU General Public License
   *   along with AndroidIDE.  If not, see <https://www.gnu.org/licenses/>.
   */
  
  /*
   * reserved comment block
   * DO NOT REMOVE OR ALTER!
   */
  /*
   * Copyright 2001-2005 The Apache Software Foundation.
   *
   * Licensed under the Apache License, Version 2.0 (the "License");
   * you may not use this file except in compliance with the License.
   * You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package jaxp.sun.org.apache.xerces.internal.parsers;
  
  import jaxp.sun.org.apache.xerces.internal.impl.Constants;
  import jaxp.sun.org.apache.xerces.internal.xni.grammars.XMLGrammarPool;
  import jaxp.sun.org.apache.xerces.internal.xni.parser.XMLComponentManager;
  import jaxp.sun.org.apache.xerces.internal.util.SymbolTable;
  import jaxp.sun.org.apache.xerces.internal.utils.XMLSecurityManager;
  
  /**
   * This configuration allows Xerces to behave in a security-conscious manner; that is,
   * it permits applications to instruct Xerces to limit certain
   * operations that could be exploited by malicious document authors to cause a denail-of-service
   * attack when the document is parsed.
   *
   * In addition to the features and properties recognized by the base
   * parser configuration, this class recognizes these additional
   * features and properties:
   * <ul>
   * <li>Properties
   *  <ul>
   *   <li>http://apache.org/xml/properties/security-manager</li>
   *  </ul>
   * </ul>
   *
   * @author Neil Graham, IBM
   *
   * @version $Id: SecurityConfiguration.java,v 1.6 2010-11-01 04:40:09 joehw Exp $
   */
  public class SecurityConfiguration extends XIncludeAwareParserConfiguration
  {
  
      //
      // Constants
      //
  
      protected static final String SECURITY_MANAGER_PROPERTY =
          Constants.XERCES_PROPERTY_PREFIX + Constants.SECURITY_MANAGER_PROPERTY;
  
      //
      // Constructors
      //
  
      /** Default constructor. */
      public SecurityConfiguration () {
          this(null, null, null);
      } // <init>()
  
      /**
       * Constructs a parser configuration using the specified symbol table.
       *
       * @param symbolTable The symbol table to use.
       */
      public SecurityConfiguration (SymbolTable symbolTable) {
          this(symbolTable, null, null);
      } // <init>(SymbolTable)
  
      /**
       * Constructs a parser configuration using the specified symbol table and
       * grammar pool.
       * <p>
       * <strong>REVISIT:</strong>
       * Grammar pool will be updated when the new validation engine is
       * implemented.
       *
       * @param symbolTable The symbol table to use.
       * @param grammarPool The grammar pool to use.
       */
      public SecurityConfiguration (SymbolTable symbolTable,
                                           XMLGrammarPool grammarPool) {
          this(symbolTable, grammarPool, null);
      } // <init>(SymbolTable,XMLGrammarPool)
  
      /**
       * Constructs a parser configuration using the specified symbol table,
       * grammar pool, and parent settings.
       * <p>
       * <strong>REVISIT:</strong>
       * Grammar pool will be updated when the new validation engine is
       * implemented.
       *
       * @param symbolTable    The symbol table to use.
       * @param grammarPool    The grammar pool to use.
       * @param parentSettings The parent settings.
       */
      public SecurityConfiguration (SymbolTable symbolTable,
                                           XMLGrammarPool grammarPool,
                                           XMLComponentManager parentSettings) {
          super(symbolTable, grammarPool, parentSettings);
  
          // create the SecurityManager property:
          setProperty(SECURITY_MANAGER_PROPERTY, new XMLSecurityManager(true));
      } // <init>(SymbolTable,XMLGrammarPool)
  
  } // class SecurityConfiguration
  