URLClassLoader
public class SecureClassLoader extends ClassLoader
ClassLoader
with additional support for defining classes with an associated code source and permissions which are retrieved by the system policy by default.Modifier | Constructor | Description |
---|---|---|
protected |
Creates a new SecureClassLoader using the default parent class loader for delegation. |
|
protected |
Creates a new SecureClassLoader using the specified parent class loader for delegation. |
|
protected |
Creates a new SecureClassLoader of the specified name and using the specified parent class loader for delegation. |
Modifier and Type | Method | Description |
---|---|---|
protected final Class |
defineClass |
Converts an array of bytes into an instance of class Class , with an optional CodeSource. |
protected final Class |
defineClass |
Converts a ByteBuffer into an instance of class Class , with an optional CodeSource. |
protected PermissionCollection |
getPermissions |
Returns the permissions for the given CodeSource object. |
clearAssertionStatus, defineClass, defineClass, defineClass, defineClass, definePackage, findClass, findClass, findLibrary, findLoadedClass, findResource, findResource, findResources, findSystemClass, getClassLoadingLock, getDefinedPackage, getDefinedPackages, getName, getPackage, getPackages, getParent, getPlatformClassLoader, getResource, getResourceAsStream, getResources, getSystemClassLoader, getSystemResource, getSystemResourceAsStream, getSystemResources, getUnnamedModule, isRegisteredAsParallelCapable, loadClass, loadClass, registerAsParallelCapable, resolveClass, resources, setClassAssertionStatus, setDefaultAssertionStatus, setPackageAssertionStatus, setSigners
protected SecureClassLoader(ClassLoader parent)
SecureClassLoader
using the specified parent class loader for delegation. If there is a security manager, this method first calls the security manager's checkCreateClassLoader
method to ensure creation of a class loader is allowed.
parent
- the parent ClassLoaderSecurityException
- if a security manager exists and its checkCreateClassLoader
method doesn't allow creation of a class loader.protected SecureClassLoader()
SecureClassLoader
using the default parent class loader for delegation. If there is a security manager, this method first calls the security manager's checkCreateClassLoader
method to ensure creation of a class loader is allowed.
SecurityException
- if a security manager exists and its checkCreateClassLoader
method doesn't allow creation of a class loader.protected SecureClassLoader(String name, ClassLoader parent)
SecureClassLoader
of the specified name and using the specified parent class loader for delegation.name
- class loader name; or null
if not namedparent
- the parent class loaderIllegalArgumentException
- if the given name is empty.SecurityException
- if a security manager exists and its SecurityManager.checkCreateClassLoader()
method doesn't allow creation of a class loader.protected final Class<?> defineClass(String name, byte[] b, int off, int len, CodeSource cs)
Class
, with an optional CodeSource. Before the class can be used it must be resolved. If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined.
name
- the expected name of the class, or null
if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix.b
- the bytes that make up the class data. The bytes in positions off
through off+len-1
should have the format of a valid class file as defined by The Java Virtual Machine Specification.off
- the start offset in b
of the class datalen
- the length of the class datacs
- the associated CodeSource, or null
if noneClass
object created from the data, and optional CodeSource.ClassFormatError
- if the data did not contain a valid classIndexOutOfBoundsException
- if either off
or len
is negative, or if off+len
is greater than b.length
.SecurityException
- if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.".protected final Class<?> defineClass(String name, ByteBuffer b, CodeSource cs)
ByteBuffer
into an instance of class Class
, with an optional CodeSource. Before the class can be used it must be resolved. If a non-null CodeSource is supplied a ProtectionDomain is constructed and associated with the class being defined.
name
- the expected name of the class, or null
if not known, using '.' and not '/' as the separator and without a trailing ".class" suffix.b
- the bytes that make up the class data. The bytes from positions b.position()
through b.position() + b.limit() -1
should have the format of a valid class file as defined by The Java Virtual Machine Specification.cs
- the associated CodeSource, or null
if noneClass
object created from the data, and optional CodeSource.ClassFormatError
- if the data did not contain a valid classSecurityException
- if an attempt is made to add this class to a package that contains classes that were signed by a different set of certificates than this class, or if the class name begins with "java.".protected PermissionCollection getPermissions(CodeSource codesource)
This method is invoked by the defineClass method which takes a CodeSource as an argument when it is constructing the ProtectionDomain for the class being defined.
codesource
- the codesource.
© 1993, 2023, Oracle and/or its affiliates. All rights reserved.
Documentation extracted from Debian's OpenJDK Development Kit package.
Licensed under the GNU General Public License, version 2, with the Classpath Exception.
Various third party code in OpenJDK is licensed under different licenses (see Debian package).
Java and OpenJDK are trademarks or registered trademarks of Oracle and/or its affiliates.
https://docs.oracle.com/en/java/javase/21/docs/api/java.base/java/security/SecureClassLoader.html