/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.camel.component.validator; import java.net.UnknownHostException; import org.apache.camel.ContextTestSupport; import org.apache.camel.ValidationException; import org.apache.camel.builder.RouteBuilder; import org.apache.camel.component.mock.MockEndpoint; import org.apache.camel.processor.validation.SchemaReader; public abstract class ValidatorDtdAccessAbstractTest extends ContextTestSupport { protected MockEndpoint finallyEndpoint; protected MockEndpoint invalidEndpoint; protected MockEndpoint unknownHostExceptionEndpoint; protected MockEndpoint validEndpoint; protected String payloud = getPayloudPart("Hello world!"); protected String ssrfPayloud = "<!DOCTYPE roottag PUBLIC \"-//VSR//PENTEST//EN\" \"http://notexisting/test\">\n" + payloud; protected String xxePayloud = "<!DOCTYPE updateProfile [<!ENTITY file SYSTEM \"http://notexistinghost/test\">]>\n" + getPayloudPart("&file;"); private final boolean accessExternalDTD; public ValidatorDtdAccessAbstractTest(boolean accessExternalDTD) { this.accessExternalDTD = accessExternalDTD; } private String getPayloudPart(String bodyValue) { return "<mail xmlns='http://foo.com/bar'><subject>Hey</subject><body>" + bodyValue + "</body></mail>"; } @Override protected void setUp() throws Exception { super.setUp(); validEndpoint = resolveMandatoryEndpoint("mock:valid", MockEndpoint.class); invalidEndpoint = resolveMandatoryEndpoint("mock:invalid", MockEndpoint.class); unknownHostExceptionEndpoint = resolveMandatoryEndpoint("mock:unknownHostException", MockEndpoint.class); finallyEndpoint = resolveMandatoryEndpoint("mock:finally", MockEndpoint.class); } @Override protected RouteBuilder createRouteBuilder() throws Exception { return new RouteBuilder() { @Override public void configure() throws Exception { // switch on DTD Access if (accessExternalDTD) { getContext().getGlobalOptions().put(SchemaReader.ACCESS_EXTERNAL_DTD, "true"); } from("direct:start") .doTry() .to("validator:org/apache/camel/component/validator/schema.xsd") .to("mock:valid") .doCatch(ValidationException.class) .to("mock:invalid") .doCatch(UnknownHostException.class) .to("mock:unknownHostException") .doFinally() .to("mock:finally").end(); } }; } }