com.ql.util.express.config

Class QLExpressRunStrategy

java.lang.Object

com.ql.util.express.config.QLExpressRunStrategy

public class QLExpressRunStrategy
extends java.lang.Object

ExpressRunner设置全局生效的配置，直接使用静态方法控制

Method Summary

Modifier and Type	Method and Description
static void	addSecureMethod(java.lang.Class<?> clazz, java.lang.String methodName)
static void	addSecurityRiskMethod(java.lang.Class<?> clazz, java.lang.String methodName) TODO 未考虑方法重载的场景
static void	assertSecurityRiskMethod(java.lang.reflect.Method method)
static boolean	checkArrLength(int arrLen)
static boolean	checkWhiteClassList(java.lang.Class<?> clazz)
static java.lang.ClassLoader	getCustomClassLoader()
static boolean	isAvoidNullPointer()
static boolean	isCompareNullLessMoreAsFalse()
static boolean	isForbidInvokeSecurityRiskMethods()
static boolean	isSandboxMode()
static void	setAvoidNullPointer(boolean avoidNullPointer)
static void	setCompareNullLessMoreAsFalse(boolean compareNullLessMoreAsFalse)
static void	setCompileWhiteCheckerList(java.util.List<WhiteChecker> compileWhiteCheckerList)
static void	setCustomClassLoader(java.lang.ClassLoader customClassLoader)
static void	setForbidInvokeSecurityRiskMethods(boolean forbidInvokeSecurityRiskMethods)
static void	setMaxArrLength(int maxArrLength)
static void	setSandBoxMode(boolean sandboxMode)
static void	setSecureMethods(java.util.Set<java.lang.String> secureMethods)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

setSandBoxMode

public static void setSandBoxMode(boolean sandboxMode)

isSandboxMode

public static boolean isSandboxMode()

isCompareNullLessMoreAsFalse

public static boolean isCompareNullLessMoreAsFalse()

setCompareNullLessMoreAsFalse

public static void setCompareNullLessMoreAsFalse(boolean compareNullLessMoreAsFalse)

isAvoidNullPointer

public static boolean isAvoidNullPointer()

setAvoidNullPointer

public static void setAvoidNullPointer(boolean avoidNullPointer)

getCustomClassLoader

public static java.lang.ClassLoader getCustomClassLoader()

setCustomClassLoader

public static void setCustomClassLoader(java.lang.ClassLoader customClassLoader)

isForbidInvokeSecurityRiskMethods

public static boolean isForbidInvokeSecurityRiskMethods()

setForbidInvokeSecurityRiskMethods

public static void setForbidInvokeSecurityRiskMethods(boolean forbidInvokeSecurityRiskMethods)

addSecurityRiskMethod

public static void addSecurityRiskMethod(java.lang.Class<?> clazz,
                                         java.lang.String methodName)

TODO 未考虑方法重载的场景

Parameters:

clazz -

methodName -

setSecureMethods

public static void setSecureMethods(java.util.Set<java.lang.String> secureMethods)

addSecureMethod

public static void addSecureMethod(java.lang.Class<?> clazz,
                                   java.lang.String methodName)

assertSecurityRiskMethod

public static void assertSecurityRiskMethod(java.lang.reflect.Method method)
                                     throws QLSecurityRiskException

Throws:

QLSecurityRiskException

checkWhiteClassList

public static boolean checkWhiteClassList(java.lang.Class<?> clazz)

Parameters:

clazz -

Returns:

true 表示位于白名单中, false 表示不在白名单中

setCompileWhiteCheckerList

public static void setCompileWhiteCheckerList(java.util.List<WhiteChecker> compileWhiteCheckerList)

setMaxArrLength

public static void setMaxArrLength(int maxArrLength)

checkArrLength

public static boolean checkArrLength(int arrLen)