114 lines
4.0 KiB
Java
114 lines
4.0 KiB
Java
/*
|
|
* Licensed to the Apache Software Foundation (ASF) under one or more
|
|
* contributor license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright ownership.
|
|
* The ASF licenses this file to You under the Apache License, Version 2.0
|
|
* (the "License"); you may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
package org.apache.tomcat.util.http;
|
|
|
|
import java.util.ArrayList;
|
|
import java.util.Collection;
|
|
import java.util.List;
|
|
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import javax.servlet.http.HttpServletRequestWrapper;
|
|
|
|
import org.junit.Assert;
|
|
import org.junit.Test;
|
|
import org.junit.runner.RunWith;
|
|
import org.junit.runners.Parameterized;
|
|
import org.junit.runners.Parameterized.Parameter;
|
|
|
|
import org.apache.catalina.connector.Request;
|
|
|
|
@RunWith(Parameterized.class)
|
|
public class TestRequestUtilSameOrigin {
|
|
|
|
@Parameterized.Parameters(name = "{index}: request[{0}], origin[{1}]")
|
|
public static Collection<Object[]> parameters() {
|
|
List<Object[]> parameterSets = new ArrayList<>();
|
|
|
|
TesterRequest request1 = new TesterRequest("http", "example.com", 80);
|
|
TesterRequest request2 = new TesterRequest("ws", "example.com", 80);
|
|
TesterRequest request3 = new TesterRequest("http", "example.com", 443);
|
|
TesterRequest request4 = new TesterRequest("http", "example.com", 8080);
|
|
|
|
parameterSets.add(new Object[] { request1, "http://example.com", Boolean.TRUE });
|
|
parameterSets.add(new Object[] { request1, "http://example.com:80", Boolean.TRUE });
|
|
parameterSets.add(new Object[] { request1, "http://example.com:8080", Boolean.FALSE});
|
|
|
|
parameterSets.add(new Object[] { request2, "ws://example.com", Boolean.TRUE });
|
|
parameterSets.add(new Object[] { request2, "ws://example.com:80", Boolean.TRUE });
|
|
parameterSets.add(new Object[] { request2, "ws://example.com:8080", Boolean.FALSE});
|
|
|
|
parameterSets.add(new Object[] { request3, "http://example.com", Boolean.FALSE });
|
|
parameterSets.add(new Object[] { request3, "http://example.com:80", Boolean.FALSE });
|
|
parameterSets.add(new Object[] { request3, "http://example.com:443", Boolean.TRUE});
|
|
|
|
parameterSets.add(new Object[] { request4, "http://example.com", Boolean.FALSE });
|
|
parameterSets.add(new Object[] { request4, "http://example.com:80", Boolean.FALSE });
|
|
parameterSets.add(new Object[] { request4, "http://example.com:8080", Boolean.TRUE});
|
|
|
|
return parameterSets;
|
|
}
|
|
|
|
|
|
@Parameter(0)
|
|
public HttpServletRequest request;
|
|
@Parameter(1)
|
|
public String origin;
|
|
@Parameter(2)
|
|
public Boolean same;
|
|
|
|
|
|
@Test
|
|
public void testSameOrigin() {
|
|
Assert.assertEquals(same, Boolean.valueOf(RequestUtil.isSameOrigin(request, origin)));
|
|
}
|
|
|
|
|
|
private static class TesterRequest extends HttpServletRequestWrapper {
|
|
|
|
private final String scheme;
|
|
private final String host;
|
|
private final int port;
|
|
|
|
public TesterRequest(String scheme, String host, int port) {
|
|
super(new Request());
|
|
this.scheme = scheme;
|
|
this.host = host;
|
|
this.port = port;
|
|
}
|
|
|
|
@Override
|
|
public String getScheme() {
|
|
return scheme;
|
|
}
|
|
|
|
@Override
|
|
public String getServerName() {
|
|
return host;
|
|
}
|
|
|
|
@Override
|
|
public int getServerPort() {
|
|
return port;
|
|
}
|
|
|
|
@Override
|
|
public String toString() {
|
|
return scheme + "://" + host + ":" + port;
|
|
}
|
|
}
|
|
}
|