ro.isdc.wro.model.resource.processor.impl.css

Class CssUrlAuthorizationProcessor

java.lang.Object

ro.isdc.wro.model.resource.processor.impl.css.AbstractCssUrlRewritingProcessor

ro.isdc.wro.model.resource.processor.impl.css.CssUrlRewritingProcessor

ro.isdc.wro.model.resource.processor.impl.css.CssUrlAuthorizationProcessor

All Implemented Interfaces:

ImportAware, ResourcePostProcessor, ResourcePreProcessor

public class CssUrlAuthorizationProcessor
extends CssUrlRewritingProcessor

This needs to be paired with the CssUrlRewritingProcessor for expected functionality.

It addresses a specific use case where a combination of pre/post processors are modifying URLs so that the ResourceAuthorizationManager no longer recognizes them to be retrieved from the classpath.

For example, assets stored in LESS variables are manipulated by both the CSS URL rewriter, which generates the first entry in the ResourceAuthorizationManager, and then the LESS compiler, which does not update the ResourceAuthorizationManager. This post processor simply adds any missing entries in ResourceAuthorizationManager for assets loaded from the classpath.

It should be noted that this processor exposes you to considerable risk if you use dynamic CSS provided by users, because it authorizes any and all asset loads if they are found in your CSS/LESS. It is not suitable for use in those conditions since it would allow users to retrieve any data from your classpath.

Adapted from CssUrlRewritingProcessor and AbstractCssUrlRewritingProcessor

Since:

1.7.6

Author:

Greg Pendlebury

Field Summary

Fields

Modifier and Type	Field and Description
static String	ALIAS

Constructor Summary

Constructors

Constructor and Description
CssUrlAuthorizationProcessor()

Method Summary

Methods

Modifier and Type	Method and Description
protected void	onUrlReplaced(String replacedUrl) Invoked when an url is replaced.
void	process(Reader reader, Writer writer) Perform actual resource processing.
protected String	replaceImageUrl(String cssUri, String imageUrl) Replace provided url with the new url if needed.

Methods inherited from class ro.isdc.wro.model.resource.processor.impl.css.CssUrlRewritingProcessor

isUriAllowed, onProcessCompleted

Methods inherited from class ro.isdc.wro.model.resource.processor.impl.css.AbstractCssUrlRewritingProcessor

getUrlPrefix, isImportAware, isReplaceNeeded, newCssUrlInspector, process, replaceDeclaration

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ALIAS

public static final String ALIAS

See Also:

Constant Field Values

Constructor Detail

CssUrlAuthorizationProcessor

public CssUrlAuthorizationProcessor()

Method Detail

process

public void process(Reader reader,
           Writer writer)
             throws IOException

Description copied from interface: ResourcePostProcessor

Perform actual resource processing. The content to be processed is read from source Reader and is written to destination Writer. It is the client responsibility to close both: Reader and writer.

Specified by:

process in interface ResourcePostProcessor

Overrides:

process in class AbstractCssUrlRewritingProcessor

Parameters:

reader - source stream.

writer - destination stream.

Throws:

IOException

replaceImageUrl

protected String replaceImageUrl(String cssUri,
                     String imageUrl)

Description copied from class: CssUrlRewritingProcessor

Replace provided url with the new url if needed.

Overrides:

replaceImageUrl in class CssUrlRewritingProcessor

Parameters:

cssUri - Uri of the parsed css.

imageUrl - to replace.

Returns:

replaced url.

onUrlReplaced

protected void onUrlReplaced(String replacedUrl)

Description copied from class: AbstractCssUrlRewritingProcessor

Invoked when an url is replaced. Useful if you need to do something with newly replaced url.

Overrides:

onUrlReplaced in class CssUrlRewritingProcessor

Parameters:

replacedUrl - the newly computed url created as a result of url rewriting.