org.codice.ddf.admin.insecure.defaults.service.PaxWebCfgFileValidator.java Source code

Introduction

Here is the source code for org.codice.ddf.admin.insecure.defaults.service.PaxWebCfgFileValidator.java

Source

/**
 * Copyright (c) Codice Foundation
 * <p>
 * This is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser
 * General Public License as published by the Free Software Foundation, either version 3 of the
 * License, or any later version.
 * <p>
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without
 * even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details. A copy of the GNU Lesser General Public License
 * is distributed along with this program and can be found at
 * <http://www.gnu.org/licenses/lgpl.html>.
 */
package org.codice.ddf.admin.insecure.defaults.service;

import java.util.List;
import java.util.Properties;

import org.apache.commons.lang.StringUtils;
import org.codice.ddf.admin.insecure.defaults.service.Alert.Level;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class PaxWebCfgFileValidator extends PropertiesFileValidator {

    static final String HTTP_ENABLED_PROPERTY = "org.osgi.service.http.enabled";

    static final String HTTP_ENABLED_MSG = "The property [%s] is set to [true] in file [%s]. This enables HTTP.";

    private static final Logger LOGGER = LoggerFactory.getLogger(PaxWebCfgFileValidator.class);

    @Override
    public List<Alert> validate() {
        resetAlerts();
        Properties properties = readFile();

        if (properties != null && properties.size() > 0) {
            validateHttpIsDisabled(properties);
        }

        for (Alert alert : alerts) {
            LOGGER.debug("Alert: {}, {}", alert.getLevel(), alert.getMessage());
        }

        return alerts;
    }

    private void validateHttpIsDisabled(Properties properties) {
        String enabled = properties.getProperty(HTTP_ENABLED_PROPERTY);

        if (StringUtils.equalsIgnoreCase(enabled, "true")) {
            alerts.add(new Alert(Level.WARN, String.format(HTTP_ENABLED_MSG, HTTP_ENABLED_PROPERTY, path)));
        }
    }
}