SecureClassLoader (Java Platform SE 7 ) (original) (raw)
- java.lang.ClassLoader
- java.security.SecureClassLoader
Direct Known Subclasses:
URLClassLoader
public class SecureClassLoader
extends ClassLoader
This class extends ClassLoader with additional support for defining classes with an associated code source and permissions which are retrieved by the system policy by default.
Constructor Summary
Constructors
Modifier Constructor and Description protected SecureClassLoader() Creates a new SecureClassLoader using the default parent class loader for delegation. protected SecureClassLoader(ClassLoader parent) Creates a new SecureClassLoader using the specified parent class loader for delegation. Method Summary
Methods
Modifier and Type Method and Description protected Class<?> defineClass(String name, byte[] b, int off, int len,CodeSource cs) Converts an array of bytes into an instance of class Class, with an optional CodeSource. protected Class<?> defineClass(String name,ByteBuffer b,CodeSource cs) Converts a ByteBuffer into an instance of class Class, with an optional CodeSource. protected PermissionCollection getPermissions(CodeSource codesource) Returns the permissions for the given CodeSource object. * ### Methods inherited from class java.lang.[ClassLoader](../../java/lang/ClassLoader.html "class in java.lang") `[clearAssertionStatus](../../java/lang/ClassLoader.html#clearAssertionStatus%28%29), [defineClass](../../java/lang/ClassLoader.html#defineClass%28byte[],%20int,%20int%29), [defineClass](../../java/lang/ClassLoader.html#defineClass%28java.lang.String,%20byte[],%20int,%20int%29), [defineClass](../../java/lang/ClassLoader.html#defineClass%28java.lang.String,%20byte[],%20int,%20int,%20java.security.ProtectionDomain%29), [defineClass](../../java/lang/ClassLoader.html#defineClass%28java.lang.String,%20java.nio.ByteBuffer,%20java.security.ProtectionDomain%29), [definePackage](../../java/lang/ClassLoader.html#definePackage%28java.lang.String,%20java.lang.String,%20java.lang.String,%20java.lang.String,%20java.lang.String,%20java.lang.String,%20java.lang.String,%20java.net.URL%29), [findClass](../../java/lang/ClassLoader.html#findClass%28java.lang.String%29), [findLibrary](../../java/lang/ClassLoader.html#findLibrary%28java.lang.String%29), [findLoadedClass](../../java/lang/ClassLoader.html#findLoadedClass%28java.lang.String%29), [findResource](../../java/lang/ClassLoader.html#findResource%28java.lang.String%29), [findResources](../../java/lang/ClassLoader.html#findResources%28java.lang.String%29), [findSystemClass](../../java/lang/ClassLoader.html#findSystemClass%28java.lang.String%29), [getClassLoadingLock](../../java/lang/ClassLoader.html#getClassLoadingLock%28java.lang.String%29), [getPackage](../../java/lang/ClassLoader.html#getPackage%28java.lang.String%29), [getPackages](../../java/lang/ClassLoader.html#getPackages%28%29), [getParent](../../java/lang/ClassLoader.html#getParent%28%29), [getResource](../../java/lang/ClassLoader.html#getResource%28java.lang.String%29), [getResourceAsStream](../../java/lang/ClassLoader.html#getResourceAsStream%28java.lang.String%29), [getResources](../../java/lang/ClassLoader.html#getResources%28java.lang.String%29), [getSystemClassLoader](../../java/lang/ClassLoader.html#getSystemClassLoader%28%29), [getSystemResource](../../java/lang/ClassLoader.html#getSystemResource%28java.lang.String%29), [getSystemResourceAsStream](../../java/lang/ClassLoader.html#getSystemResourceAsStream%28java.lang.String%29), [getSystemResources](../../java/lang/ClassLoader.html#getSystemResources%28java.lang.String%29), [loadClass](../../java/lang/ClassLoader.html#loadClass%28java.lang.String%29), [loadClass](../../java/lang/ClassLoader.html#loadClass%28java.lang.String,%20boolean%29), [registerAsParallelCapable](../../java/lang/ClassLoader.html#registerAsParallelCapable%28%29), [resolveClass](../../java/lang/ClassLoader.html#resolveClass%28java.lang.Class%29), [setClassAssertionStatus](../../java/lang/ClassLoader.html#setClassAssertionStatus%28java.lang.String,%20boolean%29), [setDefaultAssertionStatus](../../java/lang/ClassLoader.html#setDefaultAssertionStatus%28boolean%29), [setPackageAssertionStatus](../../java/lang/ClassLoader.html#setPackageAssertionStatus%28java.lang.String,%20boolean%29), [setSigners](../../java/lang/ClassLoader.html#setSigners%28java.lang.Class,%20java.lang.Object[]%29)` * ### Methods inherited from class java.lang.[Object](../../java/lang/Object.html "class in java.lang") `[clone](../../java/lang/Object.html#clone%28%29), [equals](../../java/lang/Object.html#equals%28java.lang.Object%29), [finalize](../../java/lang/Object.html#finalize%28%29), [getClass](../../java/lang/Object.html#getClass%28%29), [hashCode](../../java/lang/Object.html#hashCode%28%29), [notify](../../java/lang/Object.html#notify%28%29), [notifyAll](../../java/lang/Object.html#notifyAll%28%29), [toString](../../java/lang/Object.html#toString%28%29), [wait](../../java/lang/Object.html#wait%28%29), [wait](../../java/lang/Object.html#wait%28long%29), [wait](../../java/lang/Object.html#wait%28long,%20int%29)`Constructor Detail
* #### SecureClassLoader protected SecureClassLoader([ClassLoader](../../java/lang/ClassLoader.html "class in java.lang") parent) Creates a new SecureClassLoader using the specified parent class loader for delegation. If there is a security manager, this method first calls the security manager's `checkCreateClassLoader` method to ensure creation of a class loader is allowed. Parameters: `parent` \- the parent ClassLoader Throws: `[SecurityException](../../java/lang/SecurityException.html "class in java.lang")` \- if a security manager exists and its`checkCreateClassLoader` method doesn't allow creation of a class loader. See Also: [SecurityManager.checkCreateClassLoader()](../../java/lang/SecurityManager.html#checkCreateClassLoader%28%29) * #### SecureClassLoader protected SecureClassLoader() Creates a new SecureClassLoader using the default parent class loader for delegation. If there is a security manager, this method first calls the security manager's `checkCreateClassLoader` method to ensure creation of a class loader is allowed. Throws: `[SecurityException](../../java/lang/SecurityException.html "class in java.lang")` \- if a security manager exists and its`checkCreateClassLoader` method doesn't allow creation of a class loader. See Also: [SecurityManager.checkCreateClassLoader()](../../java/lang/SecurityManager.html#checkCreateClassLoader%28%29)Method Detail
* #### defineClass protected final [Class](../../java/lang/Class.html "class in java.lang")<?> defineClass([String](../../java/lang/String.html "class in java.lang") name, byte[] b, int off, int len, [CodeSource](../../java/security/CodeSource.html "class in java.security") cs) Converts an array of bytes into an instance of class Class, with an optional CodeSource. Before the class can be used it must be resolved. If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined. Parameters: `name` \- the expected name of the class, or `null` if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix. `b` \- the bytes that make up the class data. The bytes in positions `off` through `off+len-1` should have the format of a valid class file as defined byThe Java™ Virtual Machine Specification. `off` \- the start offset in `b` of the class data `len` \- the length of the class data `cs` \- the associated CodeSource, or `null` if none Returns: the `Class` object created from the data, and optional CodeSource. Throws: `[ClassFormatError](../../java/lang/ClassFormatError.html "class in java.lang")` \- if the data did not contain a valid class `[IndexOutOfBoundsException](../../java/lang/IndexOutOfBoundsException.html "class in java.lang")` \- if either `off` or`len` is negative, or if`off+len` is greater than `b.length`. `[SecurityException](../../java/lang/SecurityException.html "class in java.lang")` \- if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.". * #### defineClass protected final [Class](../../java/lang/Class.html "class in java.lang")<?> defineClass([String](../../java/lang/String.html "class in java.lang") name, [ByteBuffer](../../java/nio/ByteBuffer.html "class in java.nio") b, [CodeSource](../../java/security/CodeSource.html "class in java.security") cs) Converts a [ByteBuffer](../../java/nio/ByteBuffer.html "class in java.nio") into an instance of class Class , with an optional CodeSource. Before the class can be used it must be resolved. If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined. Parameters: `name` \- the expected name of the class, or `null` if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix. `b` \- the bytes that make up the class data. The bytes from positionsb.position() through b.position() + b.limit() -1 should have the format of a valid class file as defined byThe Java™ Virtual Machine Specification. `cs` \- the associated CodeSource, or `null` if none Returns: the `Class` object created from the data, and optional CodeSource. Throws: `[ClassFormatError](../../java/lang/ClassFormatError.html "class in java.lang")` \- if the data did not contain a valid class `[SecurityException](../../java/lang/SecurityException.html "class in java.lang")` \- if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.". Since: 1.5 * #### getPermissions protected [PermissionCollection](../../java/security/PermissionCollection.html "class in java.security") getPermissions([CodeSource](../../java/security/CodeSource.html "class in java.security") codesource) Returns the permissions for the given CodeSource object. This method is invoked by the defineClass method which takes a CodeSource as an argument when it is constructing the ProtectionDomain for the class being defined. Parameters: `codesource` \- the codesource. Returns: the permissions granted to the codesource.
Submit a bug or feature
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
Copyright © 1993, 2020, Oracle and/or its affiliates. All rights reserved. Use is subject to license terms. Also see the documentation redistribution policy.