Class AllowedResourceAliasChecker

java.lang.Object

org.eclipse.jetty.util.component.AbstractLifeCycle

org.eclipse.jetty.server.AllowedResourceAliasChecker

All Implemented Interfaces:

ContextHandler.AliasCheck, LifeCycle

Direct Known Subclasses:

SymlinkAllowedResourceAliasChecker

public class AllowedResourceAliasChecker
extends AbstractLifeCycle
implements ContextHandler.AliasCheck

This will approve any alias to anything inside of the ContextHandlers resource base which is not protected by a protected target as defined by ContextHandler.getProtectedTargets() at start.

Aliases approved by this may still be able to bypass SecurityConstraints, so this class would need to be extended to enforce any additional security constraints that are required.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
private class	AllowedResourceAliasChecker.AllowedResourceAliasCheckListener

Nested classes/interfaces inherited from class AbstractLifeCycle

AbstractLifeCycle.AbstractLifeCycleListener

Nested classes/interfaces inherited from interface LifeCycle

LifeCycle.Listener

Field Summary

Fields

Modifier and Type	Field	Description
protected Path	_base
private final ContextHandler	_contextHandler
private final AllowedResourceAliasChecker.AllowedResourceAliasCheckListener	_listener
private final List<Path>	_protected
protected static final LinkOption[]	FOLLOW_LINKS
private static final Logger	LOG
protected static final LinkOption[]	NO_FOLLOW_LINKS

Fields inherited from class AbstractLifeCycle

FAILED, RUNNING, STARTED, STARTING, STOPPED, STOPPING

Constructor Summary

Constructors

Constructor	Description
AllowedResourceAliasChecker(ContextHandler contextHandler)

Method Summary

Modifier and Type	Method	Description
protected boolean	check(String pathInContext, Path path)
boolean	check(String pathInContext, Resource resource)	Check an alias
protected void	doStart()
protected void	doStop()
protected ContextHandler	getContextHandler()
protected Path	getPath(Resource resource)
private static Path	getRealPath(Path path)
protected void	initialize()
protected boolean	isAllowed(Path path)
protected boolean	isSameFile(Path path1, Path path2)
String	toString()

Methods inherited from class AbstractLifeCycle

addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, setStopTimeout, start, stop

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Details

LOG

private static final Logger LOG

FOLLOW_LINKS

protected static final LinkOption[] FOLLOW_LINKS

NO_FOLLOW_LINKS

protected static final LinkOption[] NO_FOLLOW_LINKS

_contextHandler

private final ContextHandler _contextHandler

_protected

private final List<Path> _protected

_listener

private final AllowedResourceAliasChecker.AllowedResourceAliasCheckListener _listener

_base

protected Path _base

Constructor Details

AllowedResourceAliasChecker

public AllowedResourceAliasChecker(ContextHandler contextHandler)

Parameters:

contextHandler - the context handler to use.

Method Details

getContextHandler

protected ContextHandler getContextHandler()

initialize

protected void initialize()

doStart

protected void doStart()
                throws Exception

Overrides:

doStart in class AbstractLifeCycle

Throws:

Exception

doStop

protected void doStop()
               throws Exception

Overrides:

doStop in class AbstractLifeCycle

Throws:

Exception

check

public boolean check(String pathInContext,
 Resource resource)

Description copied from interface: ContextHandler.AliasCheck

Check an alias

Specified by:

check in interface ContextHandler.AliasCheck

Parameters:

pathInContext - The path the aliased resource was created for

resource - The aliased resourced

Returns:

True if the resource is OK to be served.

check

protected boolean check(String pathInContext,
 Path path)

isAllowed

protected boolean isAllowed(Path path)

isSameFile

protected boolean isSameFile(Path path1,
 Path path2)

getRealPath

private static Path getRealPath(Path path)

getPath

protected Path getPath(Resource resource)

toString

public String toString()

Overrides:

toString in class AbstractLifeCycle