init

test/org/apache/catalina/loader/TestWebappClassLoader.java

@@ -0,0 +1,175 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements.  See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License.  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.catalina.loader;
+
+import java.io.File;
+import java.io.IOException;
+import java.net.URL;
+import java.net.URLClassLoader;
+
+import org.junit.Assert;
+import org.junit.Test;
+
+import org.apache.catalina.core.StandardContext;
+import org.apache.catalina.startup.Tomcat;
+import org.apache.catalina.startup.TomcatBaseTest;
+
+public class TestWebappClassLoader extends TomcatBaseTest {
+
+    @Test
+    public void testGetURLs() throws Exception {
+        File f = new File("test/webresources/war-url-connection.war");
+
+        String[] expected = new String[2];
+        String warUrl = f.toURI().toURL().toExternalForm();
+        expected[0] = "war:" + warUrl + "*/WEB-INF/classes/";
+        expected[1] = "war:" + warUrl + "*/WEB-INF/lib/test.jar";
+
+        Tomcat tomcat = getTomcatInstance();
+
+        StandardContext ctx =
+                (StandardContext)tomcat.addContext("",  f.getAbsolutePath());
+
+        tomcat.start();
+
+        ClassLoader cl = ctx.getLoader().getClassLoader();
+
+        Assert.assertTrue(cl instanceof URLClassLoader);
+
+        try (URLClassLoader ucl = (URLClassLoader) cl) {
+            URL[] urls = ucl.getURLs();
+            Assert.assertEquals(expected.length, urls.length);
+            String[] actual = new String[urls.length];
+            for (int i = 0; i < urls.length; i++) {
+                actual[i] = urls[i].toExternalForm();
+            }
+            Assert.assertArrayEquals(expected, actual);
+        }
+    }
+
+    @Test
+    public void testFilter() throws IOException {
+
+        String[] classSuffixes = new String[]{
+            "",
+            "some.package.Example"
+        };
+
+        String[] resourceSuffixes = new String[]{
+            "",
+            "some/path/test.properties",
+            "some/path/test"
+        };
+
+        String[] prefixes = new String[]{
+            "",
+            "resources",
+            "WEB-INF",
+            "WEB-INF.classes",
+            "WEB-INF.lib",
+            "org",
+            "org.apache",
+            "javax",
+            "com.mycorp"
+        };
+
+        String[] prefixesPermit = new String[]{
+            "org.apache.tomcat.jdbc",
+            "javax.servlet.jsp.jstl",
+        };
+
+        String[] prefixesDeny = new String[]{
+            "org.apache.catalina",
+            "org.apache.coyote",
+            "org.apache.el",
+            "org.apache.jasper",
+            "org.apache.juli",
+            "org.apache.naming",
+            "org.apache.tomcat",
+            "javax.el",
+            "javax.servlet",
+            "javax.websocket",
+            "javax.security.auth.message"
+        };
+
+        try (WebappClassLoader loader = new WebappClassLoader()) {
+            String name;
+
+            for (String prefix : prefixes) {
+                for (String suffix : classSuffixes) {
+                    name = prefix + "." + suffix;
+                    Assert.assertTrue("Class '" + name + "' failed permit filter",
+                               !loader.filter(name, true));
+                    if (prefix.equals("")) {
+                        name = suffix;
+                        Assert.assertTrue("Class '" + name + "' failed permit filter",
+                                   !loader.filter(name, true));
+                    }
+                    if (suffix.equals("")) {
+                        name = prefix;
+                        Assert.assertTrue("Class '" + name + "' failed permit filter",
+                                   !loader.filter(name, true));
+                    }
+                }
+                prefix = prefix.replace('.', '/');
+                for (String suffix : resourceSuffixes) {
+                    name = prefix + "/" + suffix;
+                    Assert.assertTrue("Resource '" + name + "' failed permit filter",
+                               !loader.filter(name, false));
+                    if (prefix.equals("")) {
+                        name = suffix;
+                        Assert.assertTrue("Resource '" + name + "' failed permit filter",
+                                   !loader.filter(name, false));
+                    }
+                    if (suffix.equals("")) {
+                        name = prefix;
+                        Assert.assertTrue("Resource '" + name + "' failed permit filter",
+                                   !loader.filter(name, false));
+                    }
+                }
+            }
+
+            for (String prefix : prefixesPermit) {
+                for (String suffix : classSuffixes) {
+                    name = prefix + "." + suffix;
+                    Assert.assertTrue("Class '" + name + "' failed permit filter",
+                               !loader.filter(name, true));
+                }
+                prefix = prefix.replace('.', '/');
+                for (String suffix : resourceSuffixes) {
+                    name = prefix + "/" + suffix;
+                    Assert.assertTrue("Resource '" + name + "' failed permit filter",
+                               !loader.filter(name, false));
+                }
+            }
+
+            for (String prefix : prefixesDeny) {
+                for (String suffix : classSuffixes) {
+                    name = prefix + "." + suffix;
+                    Assert.assertTrue("Class '" + name + "' failed deny filter",
+                               loader.filter(name, true));
+                }
+                prefix = prefix.replace('.', '/');
+                for (String suffix : resourceSuffixes) {
+                    name = prefix + "/" + suffix;
+                    Assert.assertTrue("Resource '" + name + "' failed deny filter",
+                               loader.filter(name, false));
+                }
+            }
+        }
+    }
+}