|
Validate an existing object. Usually objects are validated as their
tokens come off the wire, but pre-existing objects may be added to
containers if a REFERENCE token arrives which points to them. The older
objects were were validated as they arrived (by a different schema), but
now they must be re-validated by the new schema.
A more naive form of validation would just accept the entire object
tree into memory and then run checkObject() on the result. This
validation is too late: it is vulnerable to both DoS and
made-you-run-code attacks.
If inbound=True, this object is arriving over the wire. If
inbound=False, this is being called to validate an existing object before
it is sent over the wire. This is done as a courtesy to the remote end,
and to improve debuggability.
Most constraints can use the same checker for both inbound and
outbound objects.
- Overrides:
constraint.Constraint.checkObject
- (inherited documentation)
|