Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-09-12 09:05:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Additional use cases to check method access

Browse Source
This commit is contained in:
Lukasz Lenart
2014-05-01 09:40:33 +02:00
parent 53fb5ba5f8
commit ee3c8d5630
1 changed files with 54 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
xwork-core/src/test/java/com/opensymphony/xwork2/ognl/OgnlUtilTest.java
+54
View File
@@ -685,6 +685,24 @@ public class OgnlUtilTest extends XWorkTestCase {
assertEquals(expected.getMessage(), "Tree [class[\"classLoader\"][\"defaultAssertionStatus\"]] trying access excluded pattern [class]");
}
public void testAvoidCallingMethodsOnObjectClassAsMap2() throws Exception {
Foo foo = new Foo();
OgnlUtil util = new OgnlUtil();
util.setEnableExpressionCache("false");
util.setExcludedProperties("class");
Exception expected = null;
try {
util.setValue("model['class']['classLoader']['defaultAssertionStatus']", ActionContext.getContext().getContextMap(), foo, true);
fail();
} catch (OgnlException e) {
expected = e;
}
assertNotNull(expected);
assertSame(expected.getClass(), OgnlException.class);
assertEquals(expected.getMessage(), "Tree [class[\"classLoader\"][\"defaultAssertionStatus\"]] trying access excluded pattern [class]");
}
public void testAvoidCallingMethodsOnObjectClassAsMapWithQuotes() throws Exception {
Foo foo = new Foo();
OgnlUtil util = new OgnlUtil();
@@ -721,6 +739,42 @@ public class OgnlUtilTest extends XWorkTestCase {
assertEquals(expected.getMessage(), "Tree [toString] trying access excluded pattern [toString]");
}
public void testAvoidCallingMethodsWithBraces() throws Exception {
Foo foo = new Foo();
OgnlUtil util = new OgnlUtil();
util.setEnableExpressionCache("false");
util.setExcludedProperties("toString");
Exception expected = null;
try {
util.setValue("toString()", ActionContext.getContext().getContextMap(), foo, true);
fail();
} catch (OgnlException e) {
expected = e;
}
assertNotNull(expected);
assertSame(expected.getClass(), OgnlException.class);
assertEquals(expected.getMessage(), "Tree [toString()] trying access excluded pattern [toString()]");
}
public void testAvoidCallingSomeClasses() throws Exception {
Foo foo = new Foo();
OgnlUtil util = new OgnlUtil();
util.setEnableExpressionCache("false");
util.setExcludedProperties("Runtime");
Exception expected = null;
try {
util.setValue("@java.lang.Runtime@getRuntime().exec('mate')", ActionContext.getContext().getContextMap(), foo, true);
fail();
} catch (OgnlException e) {
expected = e;
}
assertNotNull(expected);
assertSame(expected.getClass(), OgnlException.class);
assertEquals(expected.getMessage(), "Tree [toString()] trying access excluded pattern [toString()]");
}
public static class Email {
String address;