Package freemarker.ext.beans
Class DefaultMemberAccessPolicy
java.lang.Object
freemarker.ext.beans.DefaultMemberAccessPolicy
- All Implemented Interfaces:
MemberAccessPolicy
Member access policy to implement the default behavior that's mostly compatible with pre-2.3.30 versions, but is
somewhat safer; it still can't provide safety in practice, if you allow untrusted users to edit templates! Use
WhitelistMemberAccessPolicy if you need stricter control.- Since:
- 2.3.30
-
Method Summary
Modifier and TypeMethodDescriptionReturns theClassMemberAccessPolicythat encapsulates the member access policy for a given class.static DefaultMemberAccessPolicygetInstance(Version incompatibleImprovements)Returns the singleton that's compatible with the given incompatible improvements version.booleanIf this returnstrue, we won't invoke the probably more expensive lookup to figure out ifObject.toString()(including its overridden variants) is exposed for a given object.
-
Method Details
-
getInstance
Returns the singleton that's compatible with the given incompatible improvements version. -
forClass
Description copied from interface:MemberAccessPolicyReturns theClassMemberAccessPolicythat encapsulates the member access policy for a given class.ClassMemberAccessPolicyimplementations need not be thread-safe. Because class introspection results are cached, and so this method is usually only called once for a given class, theClassMemberAccessPolicyinstances shouldn't be cached by the implementation of this method.- Specified by:
forClassin interfaceMemberAccessPolicy- Parameters:
contextClass- The exact class of object from which members will be get in the templates.
-
isToStringAlwaysExposed
public boolean isToStringAlwaysExposed()Description copied from interface:MemberAccessPolicyIf this returnstrue, we won't invoke the probably more expensive lookup to figure out ifObject.toString()(including its overridden variants) is exposed for a given object. If this returnsfalse, then no such optimization is made. This method was introduced asObject.toString()is called frequently, as it's used whenever an object is converted to string, like printed to the output, and it's not even a reflection-based call (we just callObject.toString()in Java). So we try to avoid the overhead of a more generic method call.- Specified by:
isToStringAlwaysExposedin interfaceMemberAccessPolicy
-