Package jenkins.util.xstream
Class SafeURLConverter
- java.lang.Object
-
- com.thoughtworks.xstream.converters.basic.AbstractSingleValueConverter
-
- com.thoughtworks.xstream.converters.basic.URLConverter
-
- jenkins.util.xstream.SafeURLConverter
-
- All Implemented Interfaces:
com.thoughtworks.xstream.converters.ConverterMatcher
,com.thoughtworks.xstream.converters.SingleValueConverter
@Restricted(org.kohsuke.accmod.restrictions.NoExternalUse.class) public class SafeURLConverter extends com.thoughtworks.xstream.converters.basic.URLConverter
Wrap the URL handler during deserialization into a specific one that does not generate DNS query on the hostname forURLStreamHandler.equals(URL, URL)
orURLStreamHandler.hashCode(URL)
. Required to protect against SECURITY-637- Since:
- 2.121.3
-
-
Constructor Summary
Constructors Constructor Description SafeURLConverter()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description Object
fromString(String str)
-