Index
All Classes and Interfaces|All Packages|Constant Field Values
A
- ALLOWLIST_DEBUG_PROPERTY - Static variable in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- ALLOWLIST_DEBUG_PROPERTY_ALT - Static variable in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- AllowlistElementParser - Class in com.atlassian.velocity.allowlist.util
-
Deprecated, for removal: This API element is subject to removal in a future version.
- AllowlistElementParser(Element) - Constructor for class com.atlassian.velocity.allowlist.util.AllowlistElementParser
-
Deprecated.
- AllowlistElements - Class in com.atlassian.velocity.allowlist.util
- AtlassianMethodTranslator - Class in com.atlassian.velocity.allowlist.uberspect
-
For use with Velocity configuration property
introspector.method.translatorin products where any of the following proxies are present: HibernateProxy Spring InfrastructureProxy Spring TargetClassAware based proxy ContextClassLoaderSettingInvocationHandler backed OSGi service dynamic proxy AnnotationPreservingInvocationHandler backed HtmlSafe dynamic proxy HostComponentFactoryBean$DynamicServiceInvocationHandler backed OSGi component dynamic proxy It additionally rectifies cases where the method resolved from the engine is an interface method, by finding the most specific method in the target class. - AtlassianMethodTranslator() - Constructor for class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
C
- ClassExtractor - Class in com.atlassian.velocity.allowlist.util
-
Exists to enable unit testing of methods which can not usually be mocked
- ClassExtractor() - Constructor for class com.atlassian.velocity.allowlist.util.ClassExtractor
- classUnproxyingFunction(Object) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
-
An unproxying function that can only resolve the target class rather than the instance.
- clearPluginAllowlist(ModuleCompleteKey) - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlistRegistrar
-
Deprecated, for removal: This API element is subject to removal in a future version.since 6.1.0, no replacement.
- com.atlassian.velocity.allowlist.api - package com.atlassian.velocity.allowlist.api
- com.atlassian.velocity.allowlist.api.internal - package com.atlassian.velocity.allowlist.api.internal
- com.atlassian.velocity.allowlist.descriptor - package com.atlassian.velocity.allowlist.descriptor
- com.atlassian.velocity.allowlist.impl - package com.atlassian.velocity.allowlist.impl
- com.atlassian.velocity.allowlist.impl.internal - package com.atlassian.velocity.allowlist.impl.internal
- com.atlassian.velocity.allowlist.uberspect - package com.atlassian.velocity.allowlist.uberspect
- com.atlassian.velocity.allowlist.util - package com.atlassian.velocity.allowlist.util
D
- disabled() - Method in class com.atlassian.velocity.allowlist.descriptor.VelocityAllowlistModuleDescriptor
E
- enabled() - Method in class com.atlassian.velocity.allowlist.descriptor.VelocityAllowlistModuleDescriptor
- extractClassLoader(Class<?>) - Method in class com.atlassian.velocity.allowlist.util.ClassExtractor
- extractPackage(Class<?>) - Method in class com.atlassian.velocity.allowlist.util.ClassExtractor
- extractPluginBundle(ClassLoader) - Method in class com.atlassian.velocity.allowlist.util.ClassExtractor
G
- getAllowlistElements() - Method in class com.atlassian.velocity.allowlist.descriptor.VelocityAllowlistModuleDescriptor
- getClasses() - Method in class com.atlassian.velocity.allowlist.util.AllowlistElementParser
-
Deprecated.
- getClasses() - Method in class com.atlassian.velocity.allowlist.util.AllowlistElements
- getContextClassLoaderProxyTarget(Object) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getHibernateProxyTarget(Object) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getHtmlSafeProxyTarget(Object) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getIntrospector() - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- getIntrospectorInternal(Log, RuntimeServices) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- getIterator(Object, Info) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- getMethod(Object, String, Object[], Info) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- getMethods() - Method in class com.atlassian.velocity.allowlist.util.AllowlistElementParser
-
Deprecated.
- getMethods() - Method in class com.atlassian.velocity.allowlist.util.AllowlistElements
- getModule() - Method in class com.atlassian.velocity.allowlist.descriptor.VelocityAllowlistModuleDescriptor
- getOsgiComponentProxyTarget(Object) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getPackages() - Method in class com.atlassian.velocity.allowlist.util.AllowlistElementParser
-
Deprecated.
- getPackages() - Method in class com.atlassian.velocity.allowlist.util.AllowlistElements
- getPropertyGet(Object, String, Info) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- getPropertySet(Object, String, Object, Info) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- getSpringAdvisedProxyTarget(Object) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getSpringInfraProxyTarget(Object) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getTranslatedMethod(Object, Method) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getUnproxiedSpecificMethod(Object, Method) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- getUnproxiedSpecificMethodCached(Object, Method) - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- GlobalMethodAllowlist - Interface in com.atlassian.velocity.allowlist.api
-
Generic method allowlist that can be used to check if a method is allowed to be invoked from a templating engine or related use cases.
H
- HTMLSAFE_HANDLER_NAME - Static variable in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
- HtmlSafePluginAwareSecureUberspector - Class in com.atlassian.velocity.allowlist.uberspect
-
A
PluginAwareSecureUberspectorsubclass which also respects the functionality ofHtmlSafeAnnotationBoxingUberspect. - HtmlSafePluginAwareSecureUberspector() - Constructor for class com.atlassian.velocity.allowlist.uberspect.HtmlSafePluginAwareSecureUberspector
I
- init() - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
-
This guarantees the Uberspector will only be initialised once but doesn't guarantee which
RuntimeServicesit will be initialised with. - init(Plugin, Element) - Method in class com.atlassian.velocity.allowlist.descriptor.VelocityAllowlistModuleDescriptor
- isAllowlistDebugMode() - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- isAllowlisted(Method) - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlist
-
Checks if a method is allowlisted by either the method explicitly or by its class/package.
- isAllowlistedClassPackage(Class<?>) - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlist
-
Only returns
trueif the actual class is allowlisted, irrespective of whether all methods declared in the class are individually allowlisted. - isAllowlistedClassPackage(Class<?>) - Method in class com.atlassian.velocity.allowlist.impl.internal.PluginAllowlistConfigurator
- isAllowlistedClassPackageCached(Class<?>) - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- isAllowlistedMethod(Object, Method) - Method in interface com.atlassian.velocity.allowlist.api.GlobalMethodAllowlist
- isAllowlistedMethod(Object, Method) - Method in class com.atlassian.velocity.allowlist.impl.VelocityGlobalMethodAllowlist
- isAllowlistedMethod(Method) - Method in interface com.atlassian.velocity.allowlist.api.GlobalMethodAllowlist
- isAllowlistedMethod(Method) - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlist
-
Only returns
trueif the specific method is allowlisted, irrespective of whether its declaring class is allowlisted. - isAllowlistedMethod(Method) - Method in class com.atlassian.velocity.allowlist.impl.internal.PluginAllowlistConfigurator
- isAllowlistedMethodCached(Method) - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- isIntrospectorEnabled() - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
L
- loadClass(String) - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
N
- newIntrospector(Log, RuntimeServices) - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureUberspector
- newIntrospector(Log, RuntimeServices) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- newUberspector() - Method in class com.atlassian.velocity.allowlist.uberspect.HtmlSafePluginAwareSecureUberspector
- newUberspector() - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
O
- onPluginFrameworkStarted(PluginFrameworkStartedEvent) - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- OSGI_COMPONENT_HANDLER_NAME - Static variable in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
P
- parse(Element) - Static method in class com.atlassian.velocity.allowlist.util.AllowlistElements
- PluginAllowlist - Interface in com.atlassian.velocity.allowlist.api.internal
-
Determines whether a plugin method or class is allowed to be invoked from a Velocity template, as defined by plugin module descriptors.
- PluginAllowlistConfigurator - Class in com.atlassian.velocity.allowlist.impl.internal
-
Holds, and can check against, all methods, classes and packages allowlisted for use in Velocity templates.
- PluginAllowlistConfigurator() - Constructor for class com.atlassian.velocity.allowlist.impl.internal.PluginAllowlistConfigurator
-
Deprecated, for removal: This API element is subject to removal in a future version.since 6.1.0, use
PluginAllowlistConfigurator(PluginAccessor)instead. - PluginAllowlistConfigurator(PluginAccessor) - Constructor for class com.atlassian.velocity.allowlist.impl.internal.PluginAllowlistConfigurator
- PluginAllowlistRegistrar - Interface in com.atlassian.velocity.allowlist.api.internal
-
Deprecated, for removal: This API element is subject to removal in a future version.since 6.1.0, use
PluginAllowlist.reload()instead. - PluginAwareSecureIntrospector - Class in com.atlassian.velocity.allowlist.uberspect
-
Extension of
SecureIntrospectorImplwhich can additionally consult thePluginAllowlist. - PluginAwareSecureIntrospector(Log, RuntimeServices) - Constructor for class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- PluginAwareSecureUberspector - Class in com.atlassian.velocity.allowlist.uberspect
-
A
SingletonUberspectorsubclass which uses the defaultSecureUberspectoras the Uberspect delegate but with aPluginAwareSecureIntrospectoras the coupled Introspector. - PluginAwareSecureUberspector() - Constructor for class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureUberspector
R
- registerPluginClasses(Plugin, ModuleCompleteKey, Set<String>) - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlistRegistrar
-
Deprecated, for removal: This API element is subject to removal in a future version.since 6.1.0, no replacement.
- registerPluginMethods(Plugin, ModuleCompleteKey, Map<String, Set<String>>) - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlistRegistrar
-
Deprecated, for removal: This API element is subject to removal in a future version.since 6.1.0, no replacement.
- registerPluginPackages(Plugin, ModuleCompleteKey, Set<String>) - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlistRegistrar
-
Deprecated, for removal: This API element is subject to removal in a future version.since 6.1.0, no replacement.
- reload() - Method in interface com.atlassian.velocity.allowlist.api.internal.PluginAllowlist
-
Reloads the allowlist from the plugin module descriptors.
- reload() - Method in class com.atlassian.velocity.allowlist.impl.internal.PluginAllowlistConfigurator
S
- setLog(Log) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- setPluginAllowlist(PluginAllowlist) - Method in class com.atlassian.velocity.allowlist.uberspect.PluginAwareSecureIntrospector
- setRuntimeLogger(RuntimeLogger) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- setRuntimeServices(RuntimeServices) - Method in class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
- SingletonUberspector - Class in com.atlassian.velocity.allowlist.uberspect
-
Useful for enforcing a single
Uberspectinstance is used for all constructed Velocity engines rather than creating a new instance for each engine. - SingletonUberspector() - Constructor for class com.atlassian.velocity.allowlist.uberspect.SingletonUberspector
U
- unproxyingFunctions() - Method in class com.atlassian.velocity.allowlist.uberspect.AtlassianMethodTranslator
-
Can be overridden to add more unproxying functions, perhaps product-specific.
V
- VelocityAllowlistModuleDescriptor - Class in com.atlassian.velocity.allowlist.descriptor
- VelocityAllowlistModuleDescriptor(ModuleFactory, PluginAllowlist) - Constructor for class com.atlassian.velocity.allowlist.descriptor.VelocityAllowlistModuleDescriptor
- VelocityGlobalMethodAllowlist - Class in com.atlassian.velocity.allowlist.impl
-
A
GlobalMethodAllowlistimplementation that uses aPluginAwareSecureIntrospectorto check if a method is allowed to be invoked from a templating engine. - VelocityGlobalMethodAllowlist(PluginAwareSecureIntrospector) - Constructor for class com.atlassian.velocity.allowlist.impl.VelocityGlobalMethodAllowlist
All Classes and Interfaces|All Packages|Constant Field Values
AllowlistElementParserinstead.