Class Configuration.SecuritySettings
- Enclosing class:
Configuration
A type containing security settings.
-
Method Summary
Modifier and TypeMethodDescriptionsetAllowAuthorApiOverrides
(Boolean allowAuthorApiOverrides) Whether to allow authors to override API settings, e.g.setAllowExternalXmlParserResources
(Boolean allowExternalXmlParserResources) Specifies whether the XML parser will process external XML resources during parsing, e.g.setAllowNonLocalFileUrls
(Boolean allowNonLocalFileUrls) Whether to allow file URLs to non-local hosts.setAllowRedirects
(Boolean allowRedirects) Whether to allow automatic URL redirects when PDFreactor receives appropriate status codes.A list of rules that PDFreactor evaluates and then either denies or allows connections to a particular resource.setDefaults
(Configuration.SecurityDefaults defaults) An object of security default behavior which is used for any URLs that do not match any rules.setHideVersionInfo
(Boolean hideVersionInfo) Specifies whether PDFreactor will not disclose any version information, e.g.setTrustAllConnectionCertificates
(Boolean trustAllConnectionCertificates) Whether to trust all certificates during HTTPS connections.setUntrustedApi
(Boolean untrustedApi) Specifies whether the PDFreactor configuration object is considered an untrusted context for the purpose of security.
-
Method Details
-
setAllowRedirects
Whether to allow automatic URL redirects when PDFreactor receives appropriate status codes.
-
setTrustAllConnectionCertificates
public Configuration.SecuritySettings setTrustAllConnectionCertificates(Boolean trustAllConnectionCertificates) Whether to trust all certificates during HTTPS connections. This setting disables certificate validation and should only be used if you experience any HTTPS certificate issues which usually occur when using invalid or self-signed certificates.
-
setAllowExternalXmlParserResources
public Configuration.SecuritySettings setAllowExternalXmlParserResources(Boolean allowExternalXmlParserResources) Specifies whether the XML parser will process external XML resources during parsing, e.g. DTDs, entities, XInlcudes.
This does not affect HTML5 document processing.
-
setUntrustedApi
Specifies whether the PDFreactor configuration object is considered an untrusted context for the purpose of security. If it is a trusted context, URLs that are specified in the configuration object are not vetted against the security settings and are always allowed. If it is not trusted, the same security settings that are used for document resources apply to all configuration resources (including the document) as well.
-
setHideVersionInfo
Specifies whether PDFreactor will not disclose any version information, e.g. in the PDF metadata.
-
setConnectionRules
A list of rules that PDFreactor evaluates and then either denies or allows connections to a particular resource.
-
setDefaults
An object of security default behavior which is used for any URLs that do not match any rules.
-
setAllowNonLocalFileUrls
Whether to allow file URLs to non-local hosts. If not enabled, PDFreactor considers all file URLs invalid that have a non-empty authority component other than exactly "localhost".
-
setAllowAuthorApiOverrides
Whether to allow authors to override API settings, e.g. by using document JavaScript.
-