org.mozilla.javascript
Class SecurityController
java.lang.Object
org.mozilla.javascript.SecurityController
public abstract class SecurityController
extends java.lang.Object
This class describes the support needed to implement security.
Three main pieces of functionality are required to implement
security for JavaScript. First, it must be possible to define
classes with an associated security domain. (This security
domain may be any object incorporating notion of access
restrictions that has meaning to an embedding; for a client-side
JavaScript embedding this would typically be
java.security.ProtectionDomain or similar object depending on an
origin URL and/or a digital certificate.)
Next it must be possible to get a security domain object that
allows a particular action only if all security domains
associated with code on the current Java stack allows it. And
finally, it must be possible to execute script code with
associated security domain injected into Java stack.
These three pieces of functionality are encapsulated in the
SecurityController class.
Object | callWithDomain(Object securityDomain, Context cx, Callable callable, Scriptable scope, Scriptable thisObj, Object[] args) - Call
Callable.call(Context cx, Scriptable scope, Scriptable thisObj,
Object[] args)
of callable under restricted security domain where an action is
allowed only if it is allowed according to the Java stack on the
moment of the execWithDomain call and securityDomain.
|
abstract GeneratedClassLoader | createClassLoader(ClassLoader parentLoader, Object securityDomain) - Get class loader-like object that can be used
to define classes with the given security context.
|
static GeneratedClassLoader | createLoader(ClassLoader parent, Object staticDomain) - Create
GeneratedClassLoader with restrictions imposed by
staticDomain and all current stack frames.
|
Object | execWithDomain(Context cx, Scriptable scope, Script script, Object securityDomain) - The application should not override this method and instead
override
callWithDomain(Object securityDomain, Context cx, Callable callable, Scriptable scope, Scriptable thisObj, Object[] args) .
|
abstract Object | getDynamicSecurityDomain(Object securityDomain) - Get dynamic security domain that allows an action only if it is allowed
by the current Java stack and securityDomain.
|
static boolean | hasGlobal() - Check if global
SecurityController was already installed.
|
static void | initGlobal(SecurityController controller) - Initialize global controller that will be used for all
security-related operations.
|
callWithDomain
public Object callWithDomain(Object securityDomain,
Context cx,
Callable callable,
Scriptable scope,
Scriptable thisObj,
Object[] args)
Call
Callable.call(Context cx, Scriptable scope, Scriptable thisObj,
Object[] args)
of
callable under restricted security domain where an action is
allowed only if it is allowed according to the Java stack on the
moment of the
execWithDomain call and
securityDomain.
Any call to
getDynamicSecurityDomain(Object)
during
execution of
callable.call(cx, scope, thisObj, args)
should return a domain incorporate restrictions imposed by
securityDomain and Java stack on the moment of callWithDomain
invocation.
The method should always be overridden, it is not declared abstract
for compatibility reasons.
createClassLoader
public abstract GeneratedClassLoader createClassLoader(ClassLoader parentLoader,
Object securityDomain)
Get class loader-like object that can be used
to define classes with the given security context.
parentLoader
- parent class loader to delegate search for classes
not defined by the class loader itselfsecurityDomain
- some object specifying the security
context of the code that is defined by the returned class loader.
createLoader
public static GeneratedClassLoader createLoader(ClassLoader parent,
Object staticDomain)
Create
GeneratedClassLoader
with restrictions imposed by
staticDomain and all current stack frames.
The method uses the SecurityController instance associated with the
current
Context
to construct proper dynamic domain and create
corresponding class loader.
If no SecurityController is associated with the current Context
,
the method calls Context.createClassLoader(ClassLoader parent)
.
execWithDomain
public Object execWithDomain(Context cx,
Scriptable scope,
Script script,
Object securityDomain)
The application should not override this method and instead
override
callWithDomain(Object securityDomain, Context cx, Callable callable, Scriptable scope, Scriptable thisObj, Object[] args)
.
getDynamicSecurityDomain
public abstract Object getDynamicSecurityDomain(Object securityDomain)
Get dynamic security domain that allows an action only if it is allowed
by the current Java stack and securityDomain. If
securityDomain is null, return domain representing permissions
allowed by the current stack.
hasGlobal
public static boolean hasGlobal()
initGlobal(SecurityController controller)
initGlobal
public static void initGlobal(SecurityController controller)
Initialize global controller that will be used for all
security-related operations. The global controller takes precedence
over already installed
Context
-specific controllers and cause
any subsequent call to
Context.setSecurityController(SecurityController)
to throw an exception.
The method can only be called once.