org.owasp.dependencycheck.utils

Class XmlUtils

java.lang.Object

org.owasp.dependencycheck.utils.XmlUtils

public final class XmlUtils
extends Object

Collection of XML related code.

Author:

Jeremy Long

Field Summary

Fields

Modifier and Type	Field and Description
static String	JAXP_SCHEMA_LANGUAGE JAXP Schema Language.
static String	JAXP_SCHEMA_SOURCE JAXP Schema Source.
static String	W3C_XML_SCHEMA W3C XML Schema.

Method Summary

Modifier and Type	Method and Description
static DocumentBuilder	buildSecureDocumentBuilder() Constructs a new document builder with security features enabled.
static SAXParser	buildSecureSaxParser() Constructs a secure SAX Parser.
static SAXParser	buildSecureSaxParser(InputStream schemaStream) Constructs a validating secure SAX Parser.
static String	getPrettyParseExceptionInfo(SAXParseException ex) Builds a prettier exception message.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

JAXP_SCHEMA_LANGUAGE

public static final String JAXP_SCHEMA_LANGUAGE

JAXP Schema Language. Source: http://docs.oracle.com/javase/tutorial/jaxp/sax/validation.html

See Also:

Constant Field Values

W3C_XML_SCHEMA

public static final String W3C_XML_SCHEMA

W3C XML Schema. Source: http://docs.oracle.com/javase/tutorial/jaxp/sax/validation.html

See Also:

Constant Field Values

JAXP_SCHEMA_SOURCE

public static final String JAXP_SCHEMA_SOURCE

JAXP Schema Source. Source: http://docs.oracle.com/javase/tutorial/jaxp/sax/validation.html

See Also:

Constant Field Values

Method Detail

buildSecureSaxParser

public static SAXParser buildSecureSaxParser(InputStream schemaStream)
                                      throws ParserConfigurationException,
                                             SAXNotRecognizedException,
                                             SAXNotSupportedException,
                                             SAXException

Constructs a validating secure SAX Parser.

Parameters:

schemaStream - the schema to validate the XML against

Returns:

a SAX Parser

Throws:

ParserConfigurationException - is thrown if there is a parser configuration exception

SAXNotRecognizedException - thrown if there is an unrecognized feature

SAXNotSupportedException - thrown if there is a non-supported feature

SAXException - is thrown if there is a SAXException

buildSecureSaxParser

public static SAXParser buildSecureSaxParser()
                                      throws ParserConfigurationException,
                                             SAXNotRecognizedException,
                                             SAXNotSupportedException,
                                             SAXException

Constructs a secure SAX Parser.

Returns:

a SAX Parser

Throws:

ParserConfigurationException - thrown if there is a parser configuration exception

SAXNotRecognizedException - thrown if there is an unrecognized feature

SAXNotSupportedException - thrown if there is a non-supported feature

SAXException - is thrown if there is a SAXException

buildSecureDocumentBuilder

public static DocumentBuilder buildSecureDocumentBuilder()
                                                  throws ParserConfigurationException

Constructs a new document builder with security features enabled.

Returns:

a new document builder

Throws:

ParserConfigurationException - thrown if there is a parser configuration exception

getPrettyParseExceptionInfo

public static String getPrettyParseExceptionInfo(SAXParseException ex)

Builds a prettier exception message.

Parameters:

ex - the SAXParseException

Returns:

an easier to read exception message