-- Customizable BKUSelection Form and SendAssertion Form

-- OA specific Checkbox to disable SAML1

1 files changed, 132 insertions, 0 deletions

diff --git a/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/validation/FormularCustomizationValitator.java b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/validation/FormularCustomizationValitator.java
new file mode 100644
index 000000000..039b6eac3
--- /dev/null
+++ b/id/ConfigWebTool/src/main/java/at/gv/egovernment/moa/id/configuration/validation/FormularCustomizationValitator.java
@@ -0,0 +1,132 @@
+package at.gv.egovernment.moa.id.configuration.validation;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.log4j.Logger;
+
+import at.gv.egovernment.moa.id.configuration.data.FormularCustomization;
+import at.gv.egovernment.moa.id.configuration.helper.LanguageHelper;
+import at.gv.egovernment.moa.util.MiscUtil;
+
+public class FormularCustomizationValitator {
+	
+	private static final Logger log = Logger.getLogger(FormularCustomizationValitator.class);
+	
+	public List<String> validate(FormularCustomization form) {
+		
+		List<String> errors = new ArrayList<String>();
+		String check;
+		
+		if (form.isOnlyMandateAllowed() && !form.isShowMandateLoginButton()) {
+			log.warn("OnlyMandateAllowed in combination with hidden MandateLoginCheckbox is not possible.");
+			errors.add(LanguageHelper.getErrorString("validation.general.bkuselection.specialfeatures.combination"));
+		}
+		
+		check = form.getBackGroundColor();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!check.startsWith("#"))
+				check = "#" + check;
+			
+			if (!ValidationHelper.isValidHexValue(check)) {
+				log.warn("BKUSelectionBackGroundColor is not a valid hex value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.color.background"));
+			}
+		}
+		
+		check = form.getFrontColor();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!check.startsWith("#"))
+				check = "#" + check;
+			
+			if (!ValidationHelper.isValidHexValue(check)) {
+				log.warn("BKUSelectionFrontColor is not a valid hex value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.color.front"));
+			}
+		}
+		
+		check = form.getHeader_BackGroundColor();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!check.startsWith("#"))
+				check = "#" + check;
+			
+			if (!ValidationHelper.isValidHexValue(check)) {
+				log.warn("HeaderBackGroundColor is not a valid hex value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.header.color.back"));
+			}
+		}
+		
+		check = form.getHeader_FrontColor();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!check.startsWith("#"))
+				check = "#" + check;
+			
+			if (!ValidationHelper.isValidHexValue(check)) {
+				log.warn("HeaderFrontColor is not a valid hex value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.header.color.front"));
+			}
+		}
+		
+		check = form.getHeader_text();
+		if (MiscUtil.isNotEmpty(check)) {			
+			if (ValidationHelper.containsPotentialCSSCharacter(check, false)) {
+				log.warn("HeaderText contains potentail XSS characters: " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.header.text", 
+						new Object[] {ValidationHelper.getPotentialCSSCharacter(false)} ));
+			}
+		}
+
+		check = form.getButton_BackGroundColor();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!check.startsWith("#"))
+				check = "#" + check;
+			
+			if (!ValidationHelper.isValidHexValue(check)) {
+				log.warn("ButtonBackGroundColor is not a valid hex value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.button.color.back"));
+			}
+		}
+		
+		check = form.getButton_BackGroundColorFocus();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!check.startsWith("#"))
+				check = "#" + check;
+			
+			if (!ValidationHelper.isValidHexValue(check)) {
+				log.warn("ButtonBackGroundColorFocus is not a valid hex value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.button.color.back.focus"));
+			}
+		}
+		
+		check = form.getButton_FrontColor();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!check.startsWith("#"))
+				check = "#" + check;
+			
+			if (!ValidationHelper.isValidHexValue(check)) {
+				log.warn("ButtonFrontColor is not a valid hex value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.button.color.front"));
+			}
+		}
+		
+		check = form.getAppletRedirectTarget();
+		if (MiscUtil.isNotEmpty(check)) {
+			if (!FormularCustomization.appletRedirectTargetList.contains(check)) {
+				log.warn("AppletRedirectTarget has not valid value " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.appletredirecttarget"));
+			}
+		}
+		
+		check = form.getFontType();
+		if (MiscUtil.isNotEmpty(check)) {			
+			if (ValidationHelper.containsPotentialCSSCharacter(check, true)) {
+				log.warn("FontType contains potentail XSS characters: " + check);
+				errors.add(LanguageHelper.getErrorString("validation.general.form.fonttype", 
+						new Object[] {ValidationHelper.getPotentialCSSCharacter(true)} ));
+			}
+		}
+		
+		return errors;
+		
+	}
+}