FormUtil.java

package com.jsql.util;

import com.jsql.model.InjectionModel;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.jsoup.Jsoup;
import org.jsoup.nodes.Element;
import org.jsoup.select.Elements;

import java.util.AbstractMap.SimpleEntry;
import java.util.*;
import java.util.Map.Entry;

public class FormUtil {
    
    /**
     * Log4j logger sent to view.
     */
    private static final Logger LOGGER = LogManager.getRootLogger();
    
    private static final String INPUT_ATTR_VALUE = "value";
    private static final String FORM_ATTR_VALUE = "method";
    
    private final InjectionModel injectionModel;
    
    public FormUtil(InjectionModel injectionModel) {
        this.injectionModel = injectionModel;
    }

    public void parseForms(int statusCode, String pageSource) {
        
        var elementsForm = Jsoup.parse(pageSource).select("form");
        
        if (elementsForm.isEmpty()) {
            return;
        }
        
        var result = new StringBuilder();
        
        Map<Element, List<Element>> mapForms = new HashMap<>();
        
        for (Element form: elementsForm) {
            
            mapForms.put(form, new ArrayList<>());
            
            result.append(
                String.format(
                    "%n<form action=\"%s\" method=\"%s\" />",
                    form.attr("action"),
                    form.attr(FORM_ATTR_VALUE)
                )
            );
            
            for (Element input: form.select("input")) {
                
                result.append(
                    String.format(
                        "%n    <input name=\"%s\" value=\"%s\" />",
                        input.attr("name"),
                        input.attr(INPUT_ATTR_VALUE)
                    )
                );
                
                mapForms.get(form).add(input);
            }
            
            Collections.reverse(mapForms.get(form));
        }
            
        if (!this.injectionModel.getMediatorUtils().getPreferencesUtil().isParsingForm()) {
            this.logForms(statusCode, elementsForm, result);
        } else {
            this.addForms(elementsForm, result, mapForms);
        }
    }

    private void addForms(Elements elementsForm, StringBuilder result, Map<Element, List<Element>> mapForms) {
        
        LOGGER.log(
            LogLevelUtil.CONSOLE_SUCCESS,
            "Found {} <form> in HTML body, adding input(s) to requests: {}",
            elementsForm::size,
            () -> result
        );
        
        for(Entry<Element, List<Element>> form: mapForms.entrySet()) {
            for (Element input: form.getValue()) {
                if ("get".equalsIgnoreCase(form.getKey().attr(FORM_ATTR_VALUE))) {
                    this.injectionModel.getMediatorUtils().getParameterUtil().getListQueryString().add(
                        0,
                        new SimpleEntry<>(
                            input.attr("name"),
                            input.attr(INPUT_ATTR_VALUE)
                        )
                    );
                } else if ("post".equalsIgnoreCase(form.getKey().attr(FORM_ATTR_VALUE))) {
                    this.injectionModel.getMediatorUtils().getParameterUtil().getListRequest().add(
                        0,
                        new SimpleEntry<>(
                            input.attr("name"),
                            input.attr(INPUT_ATTR_VALUE)
                        )
                    );
                }
            }
        }
    }

    private void logForms(int statusCode, Elements elementsForm, StringBuilder result) {
        
        LOGGER.log(
            LogLevelUtil.CONSOLE_DEFAULT,
            "Found {} ignored <form> in HTML body: {}",
            elementsForm::size,
            () -> result
        );
        
        if (statusCode != 200) {
            LOGGER.log(LogLevelUtil.CONSOLE_INFORM, "WAF can detect missing form parameters, you may enable 'Add <input/> parameters' in Preferences and retry");
        }
    }
}














Active mutators

CONDITIONALS_BOUNDARY
EMPTY_RETURNS
FALSE_RETURNS
INCREMENTS
INVERT_NEGS
MATH
NEGATE_CONDITIONALS
NULL_RETURNS
PRIMITIVE_RETURNS
TRUE_RETURNS
VOID_METHOD_CALLS

Tests examined

Report generated by PIT 1.16.1

1		package com.jsql.util;
2
3		import com.jsql.model.InjectionModel;
4		import org.apache.logging.log4j.LogManager;
5		import org.apache.logging.log4j.Logger;
6		import org.jsoup.Jsoup;
7		import org.jsoup.nodes.Element;
8		import org.jsoup.select.Elements;
9
10		import java.util.AbstractMap.SimpleEntry;
11		import java.util.*;
12		import java.util.Map.Entry;
13
14		public class FormUtil {
15
16		/**
17		* Log4j logger sent to view.
18		*/
19		private static final Logger LOGGER = LogManager.getRootLogger();
20
21		private static final String INPUT_ATTR_VALUE = "value";
22		private static final String FORM_ATTR_VALUE = "method";
23
24		private final InjectionModel injectionModel;
25
26		public FormUtil(InjectionModel injectionModel) {
27		this.injectionModel = injectionModel;
28		}
29
30		public void parseForms(int statusCode, String pageSource) {
31
32		var elementsForm = Jsoup.parse(pageSource).select("form");
33
34	1 1. parseForms : negated conditional → NO_COVERAGE	if (elementsForm.isEmpty()) {
35		return;
36		}
37
38		var result = new StringBuilder();
39
40		Map<Element, List<Element>> mapForms = new HashMap<>();
41
42		for (Element form: elementsForm) {
43
44		mapForms.put(form, new ArrayList<>());
45
46		result.append(
47		String.format(
48		"%n<form action=\"%s\" method=\"%s\" />",
49		form.attr("action"),
50		form.attr(FORM_ATTR_VALUE)
51		)
52		);
53
54		for (Element input: form.select("input")) {
55
56		result.append(
57		String.format(
58		"%n <input name=\"%s\" value=\"%s\" />",
59		input.attr("name"),
60		input.attr(INPUT_ATTR_VALUE)
61		)
62		);
63
64		mapForms.get(form).add(input);
65		}
66
67	1 1. parseForms : removed call to java/util/Collections::reverse → NO_COVERAGE	Collections.reverse(mapForms.get(form));
68		}
69
70	1 1. parseForms : negated conditional → NO_COVERAGE	if (!this.injectionModel.getMediatorUtils().getPreferencesUtil().isParsingForm()) {
71	1 1. parseForms : removed call to com/jsql/util/FormUtil::logForms → NO_COVERAGE	this.logForms(statusCode, elementsForm, result);
72		} else {
73	1 1. parseForms : removed call to com/jsql/util/FormUtil::addForms → NO_COVERAGE	this.addForms(elementsForm, result, mapForms);
74		}
75		}
76
77		private void addForms(Elements elementsForm, StringBuilder result, Map<Element, List<Element>> mapForms) {
78
79		LOGGER.log(
80		LogLevelUtil.CONSOLE_SUCCESS,
81		"Found {} <form> in HTML body, adding input(s) to requests: {}",
82		elementsForm::size,
83	1 1. lambda$addForms$0 : replaced return value with null for com/jsql/util/FormUtil::lambda$addForms$0 → NO_COVERAGE	() -> result
84		);
85
86		for(Entry<Element, List<Element>> form: mapForms.entrySet()) {
87		for (Element input: form.getValue()) {
88	1 1. addForms : negated conditional → NO_COVERAGE	if ("get".equalsIgnoreCase(form.getKey().attr(FORM_ATTR_VALUE))) {
89	1 1. addForms : removed call to java/util/List::add → NO_COVERAGE	this.injectionModel.getMediatorUtils().getParameterUtil().getListQueryString().add(
90		0,
91		new SimpleEntry<>(
92		input.attr("name"),
93		input.attr(INPUT_ATTR_VALUE)
94		)
95		);
96	1 1. addForms : negated conditional → NO_COVERAGE	} else if ("post".equalsIgnoreCase(form.getKey().attr(FORM_ATTR_VALUE))) {
97	1 1. addForms : removed call to java/util/List::add → NO_COVERAGE	this.injectionModel.getMediatorUtils().getParameterUtil().getListRequest().add(
98		0,
99		new SimpleEntry<>(
100		input.attr("name"),
101		input.attr(INPUT_ATTR_VALUE)
102		)
103		);
104		}
105		}
106		}
107		}
108
109		private void logForms(int statusCode, Elements elementsForm, StringBuilder result) {
110
111		LOGGER.log(
112		LogLevelUtil.CONSOLE_DEFAULT,
113		"Found {} ignored <form> in HTML body: {}",
114		elementsForm::size,
115	1 1. lambda$logForms$1 : replaced return value with null for com/jsql/util/FormUtil::lambda$logForms$1 → NO_COVERAGE	() -> result
116		);
117
118	1 1. logForms : negated conditional → NO_COVERAGE	if (statusCode != 200) {
119		LOGGER.log(LogLevelUtil.CONSOLE_INFORM, "WAF can detect missing form parameters, you may enable 'Add <input/> parameters' in Preferences and retry");
120		}
121		}
122		}
		Mutations
34		1.1 Location : parseForms Killed by : none negated conditional → NO_COVERAGE
67		1.1 Location : parseForms Killed by : none removed call to java/util/Collections::reverse → NO_COVERAGE
70		1.1 Location : parseForms Killed by : none negated conditional → NO_COVERAGE
71		1.1 Location : parseForms Killed by : none removed call to com/jsql/util/FormUtil::logForms → NO_COVERAGE
73		1.1 Location : parseForms Killed by : none removed call to com/jsql/util/FormUtil::addForms → NO_COVERAGE
83		1.1 Location : lambda$addForms$0 Killed by : none replaced return value with null for com/jsql/util/FormUtil::lambda$addForms$0 → NO_COVERAGE
88		1.1 Location : addForms Killed by : none negated conditional → NO_COVERAGE
89		1.1 Location : addForms Killed by : none removed call to java/util/List::add → NO_COVERAGE
96		1.1 Location : addForms Killed by : none negated conditional → NO_COVERAGE
97		1.1 Location : addForms Killed by : none removed call to java/util/List::add → NO_COVERAGE
115		1.1 Location : lambda$logForms$1 Killed by : none replaced return value with null for com/jsql/util/FormUtil::lambda$logForms$1 → NO_COVERAGE
118		1.1 Location : logForms Killed by : none negated conditional → NO_COVERAGE

FormUtil.java

Mutations

Active mutators

Tests examined