FormUtil.java

package com.jsql.util;

import com.jsql.model.InjectionModel;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.jsoup.Jsoup;
import org.jsoup.nodes.Element;
import org.jsoup.select.Elements;

import java.util.AbstractMap.SimpleEntry;
import java.util.*;
import java.util.Map.Entry;

public class FormUtil {
    
    private static final Logger LOGGER = LogManager.getRootLogger();
    
    private static final String INPUT_ATTR_VALUE = "value";
    private static final String FORM_ATTR_VALUE = "method";
    
    private final InjectionModel injectionModel;
    
    public FormUtil(InjectionModel injectionModel) {
        this.injectionModel = injectionModel;
    }

    public void parseForms(int statusCode, String pageSource) {
        var elementsForm = Jsoup.parse(pageSource).select("form");
        if (elementsForm.isEmpty()) {
            return;
        }
        
        var result = new StringBuilder();
        Map<Element, List<Element>> mapForms = new HashMap<>();
        
        for (Element form: elementsForm) {
            mapForms.put(form, new ArrayList<>());
            result.append(
                String.format(
                    "%n<form action=\"%s\" method=\"%s\" />",
                    form.attr("action"),
                    form.attr(FormUtil.FORM_ATTR_VALUE)
                )
            );
            for (Element input: form.select("input")) {
                result.append(
                    String.format(
                        "%n    <input name=\"%s\" value=\"%s\" />",
                        input.attr("name"),
                        input.attr(FormUtil.INPUT_ATTR_VALUE)
                    )
                );
                mapForms.get(form).add(input);
            }
            Collections.reverse(mapForms.get(form));
        }
            
        if (!this.injectionModel.getMediatorUtils().getPreferencesUtil().isParsingForm()) {
            this.logForms(statusCode, elementsForm, result);
        } else {
            this.addForms(elementsForm, result, mapForms);
        }
    }

    private void addForms(Elements elementsForm, StringBuilder result, Map<Element, List<Element>> mapForms) {
        LOGGER.log(
            LogLevelUtil.CONSOLE_SUCCESS,
            "Found {} <form> in HTML body, adding input(s) to requests: {}",
            elementsForm::size,
            () -> result
        );
        
        for (Entry<Element, List<Element>> form: mapForms.entrySet()) {
            for (Element input: form.getValue()) {
                if (StringUtil.GET.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
                    this.injectionModel.getMediatorUtils().getParameterUtil().getListQueryString().add(
                        0,
                        new SimpleEntry<>(
                            input.attr("name"),
                            input.attr(FormUtil.INPUT_ATTR_VALUE)
                        )
                    );
                } else if (StringUtil.POST.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
                    this.injectionModel.getMediatorUtils().getParameterUtil().getListRequest().add(
                        0,
                        new SimpleEntry<>(
                            input.attr("name"),
                            input.attr(FormUtil.INPUT_ATTR_VALUE)
                        )
                    );
                }
            }
        }
    }

    private void logForms(int statusCode, Elements elementsForm, StringBuilder result) {
        LOGGER.log(
            LogLevelUtil.CONSOLE_DEFAULT,
            "Found {} ignored <form> in HTML body: {}",
            elementsForm::size,
            () -> result
        );
        if (statusCode != 200) {
            LOGGER.log(LogLevelUtil.CONSOLE_INFORM, "WAF can detect missing form parameters, you may enable 'Add <input/> parameters' in Preferences and retry");
        }
    }
}














Active mutators

CONDITIONALS_BOUNDARY
EMPTY_RETURNS
FALSE_RETURNS
INCREMENTS
INVERT_NEGS
MATH
NEGATE_CONDITIONALS
NULL_RETURNS
PRIMITIVE_RETURNS
TRUE_RETURNS
VOID_METHOD_CALLS

Tests examined

Report generated by PIT 1.19.1

1		package com.jsql.util;
2
3		import com.jsql.model.InjectionModel;
4		import org.apache.logging.log4j.LogManager;
5		import org.apache.logging.log4j.Logger;
6		import org.jsoup.Jsoup;
7		import org.jsoup.nodes.Element;
8		import org.jsoup.select.Elements;
9
10		import java.util.AbstractMap.SimpleEntry;
11		import java.util.*;
12		import java.util.Map.Entry;
13
14		public class FormUtil {
15
16		private static final Logger LOGGER = LogManager.getRootLogger();
17
18		private static final String INPUT_ATTR_VALUE = "value";
19		private static final String FORM_ATTR_VALUE = "method";
20
21		private final InjectionModel injectionModel;
22
23		public FormUtil(InjectionModel injectionModel) {
24		this.injectionModel = injectionModel;
25		}
26
27		public void parseForms(int statusCode, String pageSource) {
28		var elementsForm = Jsoup.parse(pageSource).select("form");
29	1 1. parseForms : negated conditional → NO_COVERAGE	if (elementsForm.isEmpty()) {
30		return;
31		}
32
33		var result = new StringBuilder();
34		Map<Element, List<Element>> mapForms = new HashMap<>();
35
36		for (Element form: elementsForm) {
37		mapForms.put(form, new ArrayList<>());
38		result.append(
39		String.format(
40		"%n<form action=\"%s\" method=\"%s\" />",
41		form.attr("action"),
42		form.attr(FormUtil.FORM_ATTR_VALUE)
43		)
44		);
45		for (Element input: form.select("input")) {
46		result.append(
47		String.format(
48		"%n <input name=\"%s\" value=\"%s\" />",
49		input.attr("name"),
50		input.attr(FormUtil.INPUT_ATTR_VALUE)
51		)
52		);
53		mapForms.get(form).add(input);
54		}
55	1 1. parseForms : removed call to java/util/Collections::reverse → NO_COVERAGE	Collections.reverse(mapForms.get(form));
56		}
57
58	1 1. parseForms : negated conditional → NO_COVERAGE	if (!this.injectionModel.getMediatorUtils().getPreferencesUtil().isParsingForm()) {
59	1 1. parseForms : removed call to com/jsql/util/FormUtil::logForms → NO_COVERAGE	this.logForms(statusCode, elementsForm, result);
60		} else {
61	1 1. parseForms : removed call to com/jsql/util/FormUtil::addForms → NO_COVERAGE	this.addForms(elementsForm, result, mapForms);
62		}
63		}
64
65		private void addForms(Elements elementsForm, StringBuilder result, Map<Element, List<Element>> mapForms) {
66		LOGGER.log(
67		LogLevelUtil.CONSOLE_SUCCESS,
68		"Found {} <form> in HTML body, adding input(s) to requests: {}",
69		elementsForm::size,
70	1 1. lambda$addForms$0 : replaced return value with null for com/jsql/util/FormUtil::lambda$addForms$0 → NO_COVERAGE	() -> result
71		);
72
73		for (Entry<Element, List<Element>> form: mapForms.entrySet()) {
74		for (Element input: form.getValue()) {
75	1 1. addForms : negated conditional → NO_COVERAGE	if (StringUtil.GET.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
76	1 1. addForms : removed call to java/util/List::add → NO_COVERAGE	this.injectionModel.getMediatorUtils().getParameterUtil().getListQueryString().add(
77		0,
78		new SimpleEntry<>(
79		input.attr("name"),
80		input.attr(FormUtil.INPUT_ATTR_VALUE)
81		)
82		);
83	1 1. addForms : negated conditional → NO_COVERAGE	} else if (StringUtil.POST.equalsIgnoreCase(form.getKey().attr(FormUtil.FORM_ATTR_VALUE))) {
84	1 1. addForms : removed call to java/util/List::add → NO_COVERAGE	this.injectionModel.getMediatorUtils().getParameterUtil().getListRequest().add(
85		0,
86		new SimpleEntry<>(
87		input.attr("name"),
88		input.attr(FormUtil.INPUT_ATTR_VALUE)
89		)
90		);
91		}
92		}
93		}
94		}
95
96		private void logForms(int statusCode, Elements elementsForm, StringBuilder result) {
97		LOGGER.log(
98		LogLevelUtil.CONSOLE_DEFAULT,
99		"Found {} ignored <form> in HTML body: {}",
100		elementsForm::size,
101	1 1. lambda$logForms$1 : replaced return value with null for com/jsql/util/FormUtil::lambda$logForms$1 → NO_COVERAGE	() -> result
102		);
103	1 1. logForms : negated conditional → NO_COVERAGE	if (statusCode != 200) {
104		LOGGER.log(LogLevelUtil.CONSOLE_INFORM, "WAF can detect missing form parameters, you may enable 'Add <input/> parameters' in Preferences and retry");
105		}
106		}
107		}
		Mutations
29		1.1 Location : parseForms Killed by : none negated conditional → NO_COVERAGE
55		1.1 Location : parseForms Killed by : none removed call to java/util/Collections::reverse → NO_COVERAGE
58		1.1 Location : parseForms Killed by : none negated conditional → NO_COVERAGE
59		1.1 Location : parseForms Killed by : none removed call to com/jsql/util/FormUtil::logForms → NO_COVERAGE
61		1.1 Location : parseForms Killed by : none removed call to com/jsql/util/FormUtil::addForms → NO_COVERAGE
70		1.1 Location : lambda$addForms$0 Killed by : none replaced return value with null for com/jsql/util/FormUtil::lambda$addForms$0 → NO_COVERAGE
75		1.1 Location : addForms Killed by : none negated conditional → NO_COVERAGE
76		1.1 Location : addForms Killed by : none removed call to java/util/List::add → NO_COVERAGE
83		1.1 Location : addForms Killed by : none negated conditional → NO_COVERAGE
84		1.1 Location : addForms Killed by : none removed call to java/util/List::add → NO_COVERAGE
101		1.1 Location : lambda$logForms$1 Killed by : none replaced return value with null for com/jsql/util/FormUtil::lambda$logForms$1 → NO_COVERAGE
103		1.1 Location : logForms Killed by : none negated conditional → NO_COVERAGE

FormUtil.java

Mutations

Active mutators

Tests examined