Interface TagInspector

All Known Implementing Classes:
UnTrustedTagInspector

public interface TagInspector
Check if the global tags are allowed (the local tags are always allowed). It should control the classes to create to prevent possible remote code invocation when the data comes from untrusted source. The standard tags are always allowed (https://yaml.org/type/index.html)
  • Method Summary

    Modifier and Type
    Method
    Description
    boolean
    Check
  • Method Details

    • isGlobalTagAllowed

      boolean isGlobalTagAllowed(Tag tag)
      Check
      Parameters:
      tag - - the global tag to check
      Returns:
      true when the custom global tag is allowed to create a custom Java instance