Class AbstractWhitelist
- java.lang.Object
-
- org.jenkinsci.plugins.scriptsecurity.sandbox.Whitelist
-
- org.jenkinsci.plugins.scriptsecurity.sandbox.whitelists.AbstractWhitelist
-
- All Implemented Interfaces:
ExtensionPoint
public abstract class AbstractWhitelist extends Whitelist
Convenience whitelist base class that denies everything by default. Thus you need only override things you wish to explicitly allow. Also reduces the risk of incompatibilities in case furtherabstract
methods are added toWhitelist
.
-
-
Nested Class Summary
-
Nested classes/interfaces inherited from interface hudson.ExtensionPoint
ExtensionPoint.LegacyInstancesAreScopedToHudson
-
-
Constructor Summary
Constructors Constructor Description AbstractWhitelist()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description boolean
permitsConstructor(Constructor<?> constructor, Object[] args)
boolean
permitsFieldGet(Field field, Object receiver)
boolean
permitsFieldSet(Field field, Object receiver, Object value)
boolean
permitsMethod(Method method, Object receiver, Object[] args)
Checks whether a given virtual method may be invoked.boolean
permitsStaticFieldGet(Field field)
boolean
permitsStaticFieldSet(Field field, Object value)
boolean
permitsStaticMethod(Method method, Object[] args)
-
-
-
Method Detail
-
permitsMethod
public boolean permitsMethod(@NonNull Method method, @NonNull Object receiver, @NonNull Object[] args)
Description copied from class:Whitelist
Checks whether a given virtual method may be invoked.Note that
method
should not be implementing or overriding a method in a supertype; in such a case the caller must pass that supertype method instead. In other words, call site selection is the responsibility of the caller (such asGroovySandbox
), not the whitelist.- Specified by:
permitsMethod
in classWhitelist
- Parameters:
method
- a method defined in the JVMreceiver
-this
, the receiver of the method callargs
- zero or more arguments- Returns:
- true to allow the method to be called, false to reject it
-
permitsConstructor
public boolean permitsConstructor(@NonNull Constructor<?> constructor, @NonNull Object[] args)
- Specified by:
permitsConstructor
in classWhitelist
-
permitsStaticMethod
public boolean permitsStaticMethod(@NonNull Method method, @NonNull Object[] args)
- Specified by:
permitsStaticMethod
in classWhitelist
-
permitsFieldSet
public boolean permitsFieldSet(@NonNull Field field, @NonNull Object receiver, Object value)
- Specified by:
permitsFieldSet
in classWhitelist
-
permitsFieldGet
public boolean permitsFieldGet(@NonNull Field field, @NonNull Object receiver)
- Specified by:
permitsFieldGet
in classWhitelist
-
permitsStaticFieldSet
public boolean permitsStaticFieldSet(@NonNull Field field, Object value)
- Specified by:
permitsStaticFieldSet
in classWhitelist
-
permitsStaticFieldGet
public boolean permitsStaticFieldGet(@NonNull Field field)
- Specified by:
permitsStaticFieldGet
in classWhitelist
-
-