/******************************************************************************* * Copyright 2014 Federal Chancellery Austria * MOA-ID has been developed in a cooperation between BRZ, the Federal * Chancellery Austria - ICT staff unit, and Graz University of Technology. * * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by * the European Commission - subsequent versions of the EUPL (the "Licence"); * You may not use this work except in compliance with the Licence. * You may obtain a copy of the Licence at: * http://www.osor.eu/eupl/ * * Unless required by applicable law or agreed to in writing, software * distributed under the Licence is distributed on an "AS IS" basis, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the Licence for the specific language governing permissions and * limitations under the Licence. * * This product combines work with different licenses. See the "NOTICE" text * file for details on the various modules and licenses. * The "NOTICE" text file is part of the distribution. Any derivative works * that you distribute must include a readable copy of the "NOTICE" text file. *******************************************************************************/ package at.gv.egovernment.moa.id.configuration.validation; import java.util.ArrayList; import java.util.List; import javax.servlet.http.HttpServletRequest; import org.apache.log4j.Logger; import at.gv.egovernment.moa.id.commons.validation.ValidationHelper; import at.gv.egovernment.moa.id.configuration.data.FormularCustomization; import at.gv.egovernment.moa.id.configuration.helper.LanguageHelper; import at.gv.egovernment.moa.util.MiscUtil; public class FormularCustomizationValitator { private static final Logger log = Logger.getLogger(FormularCustomizationValitator.class); public List validate(FormularCustomization form, HttpServletRequest request) { List errors = new ArrayList(); String check; if (form.isOnlyMandateAllowed() && !form.isShowMandateLoginButton()) { log.warn("OnlyMandateAllowed in combination with hidden MandateLoginCheckbox is not possible."); errors.add(LanguageHelper.getErrorString("validation.general.bkuselection.specialfeatures.combination", request)); } check = form.getBackGroundColor(); if (MiscUtil.isNotEmpty(check)) { if (!check.startsWith("#")) check = "#" + check; if (!ValidationHelper.isValidHexValue(check)) { log.warn("BKUSelectionBackGroundColor is not a valid hex value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.color.background", request)); } } check = form.getFrontColor(); if (MiscUtil.isNotEmpty(check)) { if (!check.startsWith("#")) check = "#" + check; if (!ValidationHelper.isValidHexValue(check)) { log.warn("BKUSelectionFrontColor is not a valid hex value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.color.front", request)); } } check = form.getHeader_BackGroundColor(); if (MiscUtil.isNotEmpty(check)) { if (!check.startsWith("#")) check = "#" + check; if (!ValidationHelper.isValidHexValue(check)) { log.warn("HeaderBackGroundColor is not a valid hex value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.header.color.back", request)); } } check = form.getHeader_FrontColor(); if (MiscUtil.isNotEmpty(check)) { if (!check.startsWith("#")) check = "#" + check; if (!ValidationHelper.isValidHexValue(check)) { log.warn("HeaderFrontColor is not a valid hex value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.header.color.front", request)); } } check = form.getHeader_text(); if (MiscUtil.isNotEmpty(check)) { if (ValidationHelper.containsNotValidCharacter(check, false)) { log.warn("HeaderText contains potentail XSS characters: " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.header.text", new Object[] {ValidationHelper.getNotValidCharacter(false)}, request )); } } check = form.getButton_BackGroundColor(); if (MiscUtil.isNotEmpty(check)) { if (!check.startsWith("#")) check = "#" + check; if (!ValidationHelper.isValidHexValue(check)) { log.warn("ButtonBackGroundColor is not a valid hex value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.button.color.back", request)); } } check = form.getButton_BackGroundColorFocus(); if (MiscUtil.isNotEmpty(check)) { if (!check.startsWith("#")) check = "#" + check; if (!ValidationHelper.isValidHexValue(check)) { log.warn("ButtonBackGroundColorFocus is not a valid hex value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.button.color.back.focus", request)); } } check = form.getButton_FrontColor(); if (MiscUtil.isNotEmpty(check)) { if (!check.startsWith("#")) check = "#" + check; if (!ValidationHelper.isValidHexValue(check)) { log.warn("ButtonFrontColor is not a valid hex value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.button.color.front", request)); } } check = form.getAppletRedirectTarget(); if (MiscUtil.isNotEmpty(check)) { if (!FormularCustomization.appletRedirectTargetList.contains(check)) { log.warn("AppletRedirectTarget has not valid value " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.appletredirecttarget", request)); } } check = form.getFontType(); if (MiscUtil.isNotEmpty(check)) { if (ValidationHelper.containsNotValidCharacter(check, true)) { log.warn("FontType contains potentail XSS characters: " + check); errors.add(LanguageHelper.getErrorString("validation.general.form.fonttype", new Object[] {ValidationHelper.getNotValidCharacter(true)}, request )); } } check = form.getApplet_height(); if (MiscUtil.isNotEmpty(check)) { if (!ValidationHelper.validateNumber(check)) { log.warn("Applet height "+ check + " is no valid number"); errors.add(LanguageHelper.getErrorString("validation.general.form.applet.height", new Object[] {ValidationHelper.getNotValidCharacter(true)}, request )); } } check = form.getApplet_width(); if (MiscUtil.isNotEmpty(check)) { if (!ValidationHelper.validateNumber(check)) { log.warn("Applet width "+ check + " is no valid number"); errors.add(LanguageHelper.getErrorString("validation.general.form.applet.width", new Object[] {ValidationHelper.getNotValidCharacter(true)}, request )); } } return errors; } }