EmbededScriptSecurity (Apache Batik Javadoc)

Class EmbededScriptSecurity

public class EmbededScriptSecurity extends Object implements ScriptSecurity

This implementation of the ScriptSecurity interface only allows scripts embeded in the document, i.e., scripts whith either the same URL as the document (as for event attributes) or scripts embeded with the data protocol.

Field Summary
static String	DATA_PROTOCOL
static String	ERROR_CANNOT_ACCESS_DOCUMENT_URL Message when trying to load a script file and the Document does not have a URL
static String	ERROR_SCRIPT_NOT_EMBEDED Message when trying to load a script that is not embeded in the document.
protected SecurityException	se The exception is built in the constructor and thrown if not null and the checkLoadScript method is called.

Field Summary

static String

DATA_PROTOCOL

static String

ERROR_CANNOT_ACCESS_DOCUMENT_URL

Message when trying to load a script file and the Document does not have a URL

static String

ERROR_SCRIPT_NOT_EMBEDED

Message when trying to load a script that is not embeded in the document.

protected SecurityException

The exception is built in the constructor and thrown if not null and the checkLoadScript method is called.

Constructor Summary
	EmbededScriptSecurity(String scriptType, ParsedURL scriptURL, ParsedURL docURL)

Constructor Summary

EmbededScriptSecurity(String scriptType, ParsedURL scriptURL, ParsedURL docURL)

Method Summary
void	checkLoadScript() Controls whether the script should be loaded or not.

Method Summary

void

checkLoadScript()

Controls whether the script should be loaded or not.

Field Detail

DATA_PROTOCOL

ERROR_CANNOT_ACCESS_DOCUMENT_URL

Message when trying to load a script file and the Document does not have a URL

ERROR_SCRIPT_NOT_EMBEDED

Message when trying to load a script that is not embeded in the document.

The exception is built in the constructor and thrown if not null and the checkLoadScript method is called.

Constructor Detail

EmbededScriptSecurity

public EmbededScriptSecurity(String scriptType, ParsedURL scriptURL, ParsedURL docURL)

Parameters: scriptType type of script, as found in the type attribute of the <script> element. scriptURL url for the script, as defined in the script's xlink:href attribute. If that attribute was empty, then this parameter should be null docURL url for the document into which the script was found.

Method Detail

checkLoadScript

Controls whether the script should be loaded or not.

Throws: SecurityException if the script should not be loaded.