2 // System.Xml.XmlSecureResolver.cs
4 // Author: Atsushi Enomoto (ginga@kit.hi-ho.ne.jp)
6 // (C) 2003 Atsushi Enomoto
7 // Copyright (C) 2005 Novell, Inc (http://www.novell.com)
11 // Permission is hereby granted, free of charge, to any person obtaining
12 // a copy of this software and associated documentation files (the
13 // "Software"), to deal in the Software without restriction, including
14 // without limitation the rights to use, copy, modify, merge, publish,
15 // distribute, sublicense, and/or sell copies of the Software, and to
16 // permit persons to whom the Software is furnished to do so, subject to
17 // the following conditions:
19 // The above copyright notice and this permission notice shall be
20 // included in all copies or substantial portions of the Software.
22 // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
23 // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
24 // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
25 // NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
26 // LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
27 // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
28 // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
32 using System.Security;
33 using System.Security.Policy;
34 using System.Security.Permissions;
38 public class XmlSecureResolver : XmlResolver
41 #region Static Members
43 public static Evidence CreateEvidenceForUrl (string securityUrl)
45 Evidence e = new Evidence ();
47 if ((securityUrl != null) && (securityUrl.Length > 0)) {
49 Url url = new Url (securityUrl);
51 } catch (ArgumentException) {
55 Zone zone = Zone.CreateFromUrl (securityUrl);
57 } catch (ArgumentException) {
61 Site site = Site.CreateFromUrl (securityUrl);
63 } catch (ArgumentException) {
72 PermissionSet permissionSet;
74 #region .ctor and Finalizer
76 public XmlSecureResolver (
77 XmlResolver resolver, Evidence evidence)
79 this.resolver = resolver;
80 if (SecurityManager.SecurityEnabled) {
81 this.permissionSet = SecurityManager.ResolvePolicy (evidence);
85 public XmlSecureResolver (
86 XmlResolver resolver, PermissionSet permissionSet)
88 this.resolver = resolver;
89 this.permissionSet = permissionSet;
92 public XmlSecureResolver (
93 XmlResolver resolver, string securityUrl)
95 this.resolver = resolver;
96 if (SecurityManager.SecurityEnabled) {
97 this.permissionSet = SecurityManager.ResolvePolicy (CreateEvidenceForUrl (securityUrl));
105 public override ICredentials Credentials {
106 set { resolver.Credentials = value; }
115 // FIXME: imperative PermitOnly isn't supported
116 public override object GetEntity (
117 Uri absoluteUri, string role, Type ofObjectToReturn)
119 if (SecurityManager.SecurityEnabled) {
120 // in case the security manager was switched after the constructor was called
121 if (permissionSet == null) {
122 throw new SecurityException (Locale.GetText (
123 "Security Manager wasn't active when instance was created."));
125 permissionSet.PermitOnly ();
127 return resolver.GetEntity (absoluteUri, role, ofObjectToReturn);
130 public override Uri ResolveUri (Uri baseUri, string relativeUri)
132 return resolver.ResolveUri (baseUri, relativeUri);