FormUtil.java

package com.jsql.util;

import com.jsql.model.InjectionModel;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.jsoup.Jsoup;
import org.jsoup.nodes.Element;
import org.jsoup.select.Elements;

import java.util.AbstractMap.SimpleEntry;
import java.util.*;
import java.util.Map.Entry;

public class FormUtil {
    
    /**
     * Log4j logger sent to view.
     */
    private static final Logger LOGGER = LogManager.getRootLogger();
    
    private static final String INPUT_ATTR_VALUE = "value";
    private static final String FORM_ATTR_VALUE = "method";
    
    private final InjectionModel injectionModel;
    
    public FormUtil(InjectionModel injectionModel) {
        this.injectionModel = injectionModel;
    }

    public void parseForms(int statusCode, String pageSource) {
        var elementsForm = Jsoup.parse(pageSource).select("form");
        if (elementsForm.isEmpty()) {
            return;
        }
        
        var result = new StringBuilder();
        Map<Element, List<Element>> mapForms = new HashMap<>();
        
        for (Element form: elementsForm) {
            mapForms.put(form, new ArrayList<>());
            result.append(
                String.format(
                    "%n<form action=\"%s\" method=\"%s\" />",
                    form.attr("action"),
                    form.attr(FormUtil.FORM_ATTR_VALUE)
                )
            );
            for (Element input: form.select("input")) {
                result.append(
                    String.format(
                        "%n    <input name=\"%s\" value=\"%s\" />",
                        input.attr("name"),
                        input.attr(FormUtil.INPUT_ATTR_VALUE)
                    )
                );
                mapForms.get(form).add(input);
            }
            Collections.reverse(mapForms.get(form));
        }
            
        if (!this.injectionModel.getMediatorUtils().getPreferencesUtil().isParsingForm()) {
            this.logForms(statusCode, elementsForm, result);
        } else {
            this.addForms(elementsForm, result, mapForms);
        }
    }

    private void addForms(Elements elementsForm, StringBuilder result, Map<Element, List<Element>> mapForms) {
        LOGGER.log(
            LogLevelUtil.CONSOLE_SUCCESS,
            "Found {} <form> in HTML body, adding input(s) to requests: {}",
            elementsForm::size,
            () -> result
        );
        
        for (Entry<Element, List<Element>> form: mapForms.entrySet()) {
            for (Element input: form.getValue()) {
                if (StringUtil.GET.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
                    this.injectionModel.getMediatorUtils().getParameterUtil().getListQueryString().add(
                        0,
                        new SimpleEntry<>(
                            input.attr("name"),
                            input.attr(FormUtil.INPUT_ATTR_VALUE)
                        )
                    );
                } else if (StringUtil.POST.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
                    this.injectionModel.getMediatorUtils().getParameterUtil().getListRequest().add(
                        0,
                        new SimpleEntry<>(
                            input.attr("name"),
                            input.attr(FormUtil.INPUT_ATTR_VALUE)
                        )
                    );
                }
            }
        }
    }

    private void logForms(int statusCode, Elements elementsForm, StringBuilder result) {
        LOGGER.log(
            LogLevelUtil.CONSOLE_DEFAULT,
            "Found {} ignored <form> in HTML body: {}",
            elementsForm::size,
            () -> result
        );
        if (statusCode != 200) {
            LOGGER.log(LogLevelUtil.CONSOLE_INFORM, "WAF can detect missing form parameters, you may enable 'Add <input/> parameters' in Preferences and retry");
        }
    }
}














Active mutators

CONDITIONALS_BOUNDARY
EMPTY_RETURNS
FALSE_RETURNS
INCREMENTS
INVERT_NEGS
MATH
NEGATE_CONDITIONALS
NULL_RETURNS
PRIMITIVE_RETURNS
TRUE_RETURNS
VOID_METHOD_CALLS

Tests examined

Report generated by PIT 1.19.1

1		package com.jsql.util;
2
3		import com.jsql.model.InjectionModel;
4		import org.apache.logging.log4j.LogManager;
5		import org.apache.logging.log4j.Logger;
6		import org.jsoup.Jsoup;
7		import org.jsoup.nodes.Element;
8		import org.jsoup.select.Elements;
9
10		import java.util.AbstractMap.SimpleEntry;
11		import java.util.*;
12		import java.util.Map.Entry;
13
14		public class FormUtil {
15
16		/**
17		* Log4j logger sent to view.
18		*/
19		private static final Logger LOGGER = LogManager.getRootLogger();
20
21		private static final String INPUT_ATTR_VALUE = "value";
22		private static final String FORM_ATTR_VALUE = "method";
23
24		private final InjectionModel injectionModel;
25
26		public FormUtil(InjectionModel injectionModel) {
27		this.injectionModel = injectionModel;
28		}
29
30		public void parseForms(int statusCode, String pageSource) {
31		var elementsForm = Jsoup.parse(pageSource).select("form");
32	1 1. parseForms : negated conditional → NO_COVERAGE	if (elementsForm.isEmpty()) {
33		return;
34		}
35
36		var result = new StringBuilder();
37		Map<Element, List<Element>> mapForms = new HashMap<>();
38
39		for (Element form: elementsForm) {
40		mapForms.put(form, new ArrayList<>());
41		result.append(
42		String.format(
43		"%n<form action=\"%s\" method=\"%s\" />",
44		form.attr("action"),
45		form.attr(FormUtil.FORM_ATTR_VALUE)
46		)
47		);
48		for (Element input: form.select("input")) {
49		result.append(
50		String.format(
51		"%n <input name=\"%s\" value=\"%s\" />",
52		input.attr("name"),
53		input.attr(FormUtil.INPUT_ATTR_VALUE)
54		)
55		);
56		mapForms.get(form).add(input);
57		}
58	1 1. parseForms : removed call to java/util/Collections::reverse → NO_COVERAGE	Collections.reverse(mapForms.get(form));
59		}
60
61	1 1. parseForms : negated conditional → NO_COVERAGE	if (!this.injectionModel.getMediatorUtils().getPreferencesUtil().isParsingForm()) {
62	1 1. parseForms : removed call to com/jsql/util/FormUtil::logForms → NO_COVERAGE	this.logForms(statusCode, elementsForm, result);
63		} else {
64	1 1. parseForms : removed call to com/jsql/util/FormUtil::addForms → NO_COVERAGE	this.addForms(elementsForm, result, mapForms);
65		}
66		}
67
68		private void addForms(Elements elementsForm, StringBuilder result, Map<Element, List<Element>> mapForms) {
69		LOGGER.log(
70		LogLevelUtil.CONSOLE_SUCCESS,
71		"Found {} <form> in HTML body, adding input(s) to requests: {}",
72		elementsForm::size,
73	1 1. lambda$addForms$0 : replaced return value with null for com/jsql/util/FormUtil::lambda$addForms$0 → NO_COVERAGE	() -> result
74		);
75
76		for (Entry<Element, List<Element>> form: mapForms.entrySet()) {
77		for (Element input: form.getValue()) {
78	1 1. addForms : negated conditional → NO_COVERAGE	if (StringUtil.GET.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
79	1 1. addForms : removed call to java/util/List::add → NO_COVERAGE	this.injectionModel.getMediatorUtils().getParameterUtil().getListQueryString().add(
80		0,
81		new SimpleEntry<>(
82		input.attr("name"),
83		input.attr(FormUtil.INPUT_ATTR_VALUE)
84		)
85		);
86	1 1. addForms : negated conditional → NO_COVERAGE	} else if (StringUtil.POST.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
87	1 1. addForms : removed call to java/util/List::add → NO_COVERAGE	this.injectionModel.getMediatorUtils().getParameterUtil().getListRequest().add(
88		0,
89		new SimpleEntry<>(
90		input.attr("name"),
91		input.attr(FormUtil.INPUT_ATTR_VALUE)
92		)
93		);
94		}
95		}
96		}
97		}
98
99		private void logForms(int statusCode, Elements elementsForm, StringBuilder result) {
100		LOGGER.log(
101		LogLevelUtil.CONSOLE_DEFAULT,
102		"Found {} ignored <form> in HTML body: {}",
103		elementsForm::size,
104	1 1. lambda$logForms$1 : replaced return value with null for com/jsql/util/FormUtil::lambda$logForms$1 → NO_COVERAGE	() -> result
105		);
106	1 1. logForms : negated conditional → NO_COVERAGE	if (statusCode != 200) {
107		LOGGER.log(LogLevelUtil.CONSOLE_INFORM, "WAF can detect missing form parameters, you may enable 'Add <input/> parameters' in Preferences and retry");
108		}
109		}
110		}
		Mutations
32		1.1 Location : parseForms Killed by : none negated conditional → NO_COVERAGE
58		1.1 Location : parseForms Killed by : none removed call to java/util/Collections::reverse → NO_COVERAGE
61		1.1 Location : parseForms Killed by : none negated conditional → NO_COVERAGE
62		1.1 Location : parseForms Killed by : none removed call to com/jsql/util/FormUtil::logForms → NO_COVERAGE
64		1.1 Location : parseForms Killed by : none removed call to com/jsql/util/FormUtil::addForms → NO_COVERAGE
73		1.1 Location : lambda$addForms$0 Killed by : none replaced return value with null for com/jsql/util/FormUtil::lambda$addForms$0 → NO_COVERAGE
78		1.1 Location : addForms Killed by : none negated conditional → NO_COVERAGE
79		1.1 Location : addForms Killed by : none removed call to java/util/List::add → NO_COVERAGE
86		1.1 Location : addForms Killed by : none negated conditional → NO_COVERAGE
87		1.1 Location : addForms Killed by : none removed call to java/util/List::add → NO_COVERAGE
104		1.1 Location : lambda$logForms$1 Killed by : none replaced return value with null for com/jsql/util/FormUtil::lambda$logForms$1 → NO_COVERAGE
106		1.1 Location : logForms Killed by : none negated conditional → NO_COVERAGE

FormUtil.java

Mutations

Active mutators

Tests examined