1 files changed, 63 insertions, 0 deletions
diff --git a/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/util/ExternalURIVerifier.java b/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/util/ExternalURIVerifier.java
new file mode 100644
index 000000000..9901212db
--- /dev/null
+++ b/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/util/ExternalURIVerifier.java
@@ -0,0 +1,63 @@
+package at.gv.egovernment.moa.spss.util;
+
+import java.util.Iterator;
+import java.util.List;
+
+import at.gv.egovernment.moa.spss.MOAApplicationException;
+import at.gv.egovernment.moa.spss.server.config.ConfigurationException;
+import at.gv.egovernment.moa.spss.server.config.ConfigurationProvider;
+
+public class ExternalURIVerifier {
+	
+	public static void verify(String host, int port) throws MOAApplicationException {
+			try {
+				ConfigurationProvider config = ConfigurationProvider.reload();
+//				
+				boolean allowExternalUris = config.getAllowExternalUris();
+				List blacklist = config.getBlackListedUris();
+				
+			  	  
+				if (allowExternalUris) {
+					Iterator it = blacklist.iterator();
+					while (it.hasNext()) {
+						String[] array = (String[])it.next();
+						String bhost = array[0];
+						String bport = array[1];
+						if (bport == null) {
+							// check only host
+							if (bhost.equalsIgnoreCase(host)) {
+								System.out.println("Blacklist check: " + host + " blacklisted");
+								throw new MOAApplicationException("4002", new Object[]{host});
+							}
+						}
+						else {
+							// check host and port
+							int iport = new Integer(bport).intValue();
+							if (bhost.equalsIgnoreCase(host) && (iport == port)) {
+								System.out.println("Blacklist check: " + host + ":" + port + " blacklisted");
+								throw new MOAApplicationException("4002", new Object[]{host + ":" + port});							
+							}
+								
+						}
+					}
+				}
+				else {
+					if (port == -1) {
+						System.out.println("No external URI allowed (" + host + ")");
+						throw new MOAApplicationException("4001", new Object[]{host});
+					}
+					else {
+						System.out.println("No external URI allowed (" + host + ":" + port +  ")");
+						throw new MOAApplicationException("4001", new Object[]{host + ":" + port});
+					}
+				}
+			  	  
+			} catch (ConfigurationException e) {
+				throw new MOAApplicationException("config.10", null);
+			}
+			
+			
+		
+	}
+
+}