/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.camel.component.xslt; import java.io.InputStream; import java.util.List; import javax.xml.transform.TransformerException; import org.apache.camel.CamelExecutionException; import org.apache.camel.ContextTestSupport; import org.apache.camel.Exchange; import org.apache.camel.builder.RouteBuilder; import org.apache.camel.component.mock.MockEndpoint; import org.apache.camel.converter.IOConverter; import org.apache.camel.impl.DefaultExchange; public class XsltDTDTest extends ContextTestSupport { private static final String MESSAGE = "<!DOCTYPE foo [<!ENTITY xxe SYSTEM \"file:///etc//user//test\">]><task><name>&xxe;</name></task>"; public void testSendingStringMessage() throws Exception { sendEntityMessage(MESSAGE); } public void testSendingInputStreamMessage() throws Exception { InputStream is = IOConverter.toInputStream(MESSAGE, new DefaultExchange(context)); sendEntityMessage(is); } private void sendEntityMessage(Object message) throws Exception { MockEndpoint endpoint = getMockEndpoint("mock:result"); endpoint.reset(); endpoint.expectedMessageCount(1); template.sendBody("direct:start1", message); assertMockEndpointsSatisfied(); List<Exchange> list = endpoint.getReceivedExchanges(); Exchange exchange = list.get(0); String xml = exchange.getIn().getBody(String.class); assertTrue("Get a wrong transformed message", xml.indexOf("<transformed subject=\"\">") > 0); try { endpoint.reset(); endpoint.expectedMessageCount(1); template.sendBody("direct:start2", message); assertMockEndpointsSatisfied(); list = endpoint.getReceivedExchanges(); exchange = list.get(0); xml = exchange.getIn().getBody(String.class); assertTrue("Get a wrong transformed message", xml.indexOf("<transformed subject=\"\">") > 0); } catch (Exception ex) { // expect an exception here assertTrue("Get a wrong exception", ex instanceof CamelExecutionException); // the file could not be found assertTrue("Get a wrong exception cause", ex.getCause() instanceof TransformerException); } } @Override protected RouteBuilder createRouteBuilder() throws Exception { return new RouteBuilder() { @Override public void configure() throws Exception { from("direct:start1") .to("xslt:org/apache/camel/component/xslt/transform_dtd.xsl") .to("mock:result"); from("direct:start2") .to("xslt:org/apache/camel/component/xslt/transform_dtd.xsl?allowStAX=false") .to("mock:result"); } }; } }