in freemarker-core/src/main/java/freemarker/ext/beans/DefaultMemberAccessPolicy.java [66:159]
private DefaultMemberAccessPolicy() {
try {
ClassLoader classLoader = DefaultMemberAccessPolicy.class.getClassLoader();
whitelistRuleFinalClasses = new HashSet<>();
whitelistRuleNonFinalClasses = new HashSet<>();
Set<Class<?>> typesWithBlacklistUnlistedRule = new HashSet<>();
List<MemberSelector> whitelistMemberSelectors = new ArrayList<>();
for (String line : loadMemberSelectorFileLines()) {
line = line.trim();
if (!MemberSelector.isIgnoredLine(line)) {
if (line.startsWith("@")) {
String[] lineParts = line.split("\\s+");
if (lineParts.length != 2) {
throw new IllegalStateException("Malformed @ line: " + line);
}
String typeName = lineParts[1];
Class<?> upperBoundType;
try {
upperBoundType = classLoader.loadClass(typeName);
} catch (ClassNotFoundException e) {
upperBoundType = null;
}
String rule = lineParts[0].substring(1);
if (rule.equals("whitelistPolicyIfAssignable")) {
if (upperBoundType != null) {
Set<Class<?>> targetSet =
(upperBoundType.getModifiers() & Modifier.FINAL) != 0
? whitelistRuleFinalClasses
: whitelistRuleNonFinalClasses;
targetSet.add(upperBoundType);
}
} else if (rule.equals("blacklistUnlistedMembers")) {
if (upperBoundType != null) {
typesWithBlacklistUnlistedRule.add(upperBoundType);
}
} else {
throw new IllegalStateException("Unhandled rule: " + rule);
}
} else {
MemberSelector memberSelector;
try {
memberSelector = MemberSelector.parse(line, classLoader);
} catch (ClassNotFoundException | NoSuchMethodException | NoSuchFieldException e) {
// Can happen if we run on an older Java than the list was made for
memberSelector = null;
}
if (memberSelector != null) {
Class<?> upperBoundType = memberSelector.getUpperBoundType();
if (upperBoundType != null) {
if (!whitelistRuleFinalClasses.contains(upperBoundType)
&& !whitelistRuleNonFinalClasses.contains(upperBoundType)
&& !typesWithBlacklistUnlistedRule.contains(upperBoundType)) {
throw new IllegalStateException("Type without rule: " + upperBoundType.getName());
}
// We always do the same, as "blacklistUnlistedMembers" is also defined via a whitelist:
whitelistMemberSelectors.add(memberSelector);
}
}
}
}
}
whitelistMemberAccessPolicy = new WhitelistMemberAccessPolicy(whitelistMemberSelectors);
// Generate blacklists based on the whitelist and the members of "blacklistUnlistedMembers" types:
List<MemberSelector> blacklistMemberSelectors = new ArrayList<>();
for (Class<?> blacklistUnlistedRuleType : typesWithBlacklistUnlistedRule) {
ClassMemberAccessPolicy classPolicy = whitelistMemberAccessPolicy.forClass(blacklistUnlistedRuleType);
for (Method method : blacklistUnlistedRuleType.getMethods()) {
if (!classPolicy.isMethodExposed(method)) {
blacklistMemberSelectors.add(new MemberSelector(blacklistUnlistedRuleType, method));
}
}
for (Constructor<?> constructor : blacklistUnlistedRuleType.getConstructors()) {
if (!classPolicy.isConstructorExposed(constructor)) {
blacklistMemberSelectors.add(new MemberSelector(blacklistUnlistedRuleType, constructor));
}
}
for (Field field : blacklistUnlistedRuleType.getFields()) {
if (!classPolicy.isFieldExposed(field)) {
blacklistMemberSelectors.add(new MemberSelector(blacklistUnlistedRuleType, field));
}
}
}
blacklistMemberAccessPolicy = new BlacklistMemberAccessPolicy(blacklistMemberSelectors);
toStringAlwaysExposed =
whitelistMemberAccessPolicy.isToStringAlwaysExposed()
&& blacklistMemberAccessPolicy.isToStringAlwaysExposed();
} catch (Exception e) {
throw new IllegalStateException("Couldn't init " + this.getClass().getName() + " instance", e);
}
}