Java Code Examples for org.apache.struts.action.ActionForward#setPath()

private ActionForward save(ActionMapping mapping, RequestContext ctx,
            User currentUser, DynaActionForm form) {
    String preferredLocale = form.getString("preferredLocale");
    if (preferredLocale != null && preferredLocale.equals("none")) {
        preferredLocale = null;
    }
    currentUser.setTimeZone(UserManager.getTimeZone(
            ((Integer) form.get("timezone")).intValue()));
    currentUser.setPreferredLocale(preferredLocale);
    UserManager.storeUser(currentUser);
    ActionMessages msgs = new ActionMessages();
    msgs.add(ActionMessages.GLOBAL_MESSAGE,
            new ActionMessage("message.preferencesModified"));
    getStrutsDelegate().saveMessages(ctx.getRequest(), msgs);
    if (ctx.getRequest().getParameter("uid") != null) {
        ActionForward display = mapping.findForward("display");
        ActionForward fwd = new ActionForward();
        fwd.setPath(display.getPath() + "?uid=" + currentUser.getId());
        fwd.setRedirect(true);
        return fwd;
    }
    return mapping.findForward("display");
}
 

protected ActionForward forward(ActionMapping mapping, HttpServletRequest request, String name, String parameter) {
    ActionForward existing = mapping.findForward(name);
    ActionForward result = new FenixActionForward(request, existing);

    if (parameter != null) {
        String[] values = request.getParameterValues(parameter);

        if (values == null) {
            return result;
        }

        StringBuilder path = new StringBuilder(existing.getPath());
        for (String value : values) {
            path.append(String.format("&%s=%s", parameter, value));
        }

        result.setPath(path.toString());
    }

    return result;
}
 

@Override
public ActionForward execute(Exception ex, 
           ExceptionConfig exConfig,
           ActionMapping mapping,
           ActionForm formInstance,
           HttpServletRequest request,
           HttpServletResponse response
	) throws ServletException {

       ActionForward actionForward = new ActionForward();
       actionForward.setPath(exConfig.getPath());
       actionForward.setRedirect(true);
       return actionForward;
}
 

@Override
public ActionForward performLookup(ActionMapping mapping, ActionForm form,
		HttpServletRequest request, HttpServletResponse response)
		throws Exception {
	ActionForward forward =  super.performLookup(mapping, form, request, response);
	String path = forward.getPath();
	//Making the hack look cleaner!
	forward.setPath(KimCommonUtilsInternal.getPathWithKimContext(path, getActionName()));
	return forward;
}
 

private ActionForward forwardForDestination(ViewDestination destination) {
    ActionForward forward = new ActionForward();
    forward.setModule(destination.getModule());
    forward.setPath(destination.getPath());
    forward.setRedirect(destination.getRedirect());
    return forward;
}
 

public ActionForward edit(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) {

        final PersonalInformationBean personalInformationBean = getRenderedObject("personalInformationBean");

        final Set<String> messages = personalInformationBean.validate();

        if (!messages.isEmpty()) {
            for (final String each : messages) {
                addActionMessage(request, each);
            }
            return prepareEditInvalid(mapping, form, request, response);
        }

        try {
            personalInformationBean.updatePersonalInformation(true);
        } catch (DomainException e) {
            addActionMessage(request, e.getKey(), e.getArgs());
            return prepareEditInvalid(mapping, form, request, response);
        }

        if (personalInformationBean.getStudent().hasAnyMissingPersonalInformation()) {
            RenderUtils.invalidateViewState();
            return prepareEdit(mapping, form, request, response);
        }

        final ActionForward forward = new ActionForward();
        forward.setPath("/home.do");
        forward.setRedirect(true);
        forward.setModule("/");

        return forward;

    }
 

private ActionForward getOldCurriculumRedirect(final ActionForm actionForm, final Student student) {
    final ActionForward actionForward = new ActionForward();
    actionForward.setPath("/viewStudentCurriculum.do?method=prepareReadByStudentNumber&studentNumber=" + student.getNumber()
            + "&executionDegreeId=" + getExecutionDegreeId(actionForm) + "&degreeCurricularPlanID="
            + getDegreeCurricularPlanId(actionForm));
    return actionForward;
}
 

private ActionForward forward(HttpServletRequest request, String windowLocation) {
    final ActionForward actionForward = new ActionForward();
    actionForward.setName(windowLocation);
    actionForward.setPath(windowLocation);
    actionForward.setRedirect(true);
    return actionForward;
}
 

/**
 * Sets under the session an attribute named forward with an ActionForward to the current
 * request.
 */
public ActionForward setDefaultActionForward(HttpServletRequest request) {
    HttpSession session = request.getSession();
    // store the request uri with query parameters in an actionforward
    String reqUri=getFullRequestUri(request);
    ActionForward forward = new ActionForward();

    forward.setPath(reqUri);
    log.info("default forward set to :" + reqUri);
    session.setAttribute("forward", forward);
    return forward;
}
 

protected ActionForward getBasePathForward(HttpServletRequest request, ActionForward forward){
ActionForward newDest = new ActionForward();
      KimCommonUtilsInternal.copyProperties(newDest, forward);
      newDest.setPath(getApplicationBaseUrl());
      return newDest;
  }
 

public ActionForward editEnrolment(final ActionMapping mapping, final ActionForm form, final HttpServletRequest request,
                                          final HttpServletResponse response) {

    final EditEnrolmentBean enrolmentBean = getRenderedObject();
    final Enrolment enrolment = enrolmentBean.getEnrolment();

    final Double newWeight = enrolmentBean.getWeight();
    final EctsConversionTable newEctsConversionTable = enrolmentBean.getEctsConversionTable();
    final Grade newNormalizedGrade = enrolmentBean.getNormalizedGrade();

    Double oldWeight = enrolment.getWeigth();

    RenderUtils.invalidateViewState();
    
    FenixFramework.atomic(() -> {
        if (newEctsConversionTable instanceof EmptyConversionTable) {
            if (newNormalizedGrade.isEmpty()) {
                // use default table
                enrolment.setEctsConversionTable(null);
                enrolment.setEctsGrade(null);
            } else {
                enrolment.setEctsGrade(newNormalizedGrade);
                enrolment.setEctsConversionTable(newEctsConversionTable);
            }
        } else {
            // default to the selected table
            enrolment.setEctsGrade(null);
            enrolment.setEctsConversionTable(newEctsConversionTable);
        }

        enrolment.setWeigth(newWeight);
    });

    LOGGER.info("Changed enrolment {} of student {} by user {}", enrolmentBean.getEnrolment().getExternalId(),
                enrolmentBean.getEnrolment().getStudent().getPerson().getUsername(), Authenticate.getUser().getUsername());
    LOGGER.info("\t newEctsConversionTable: {}", newEctsConversionTable == null ? "-" : newEctsConversionTable
                                                                                            .getPresentationName().getContent());
    LOGGER.info("\t newEctsGrade: {}", newNormalizedGrade == null ? "-" : newNormalizedGrade.getValue());
    if (!oldWeight.equals(newWeight)) {
        LOGGER.info("\t oldWeight: {} newWeight: {}", oldWeight.toString(), newWeight.toString());
    }


    final UriBuilder builder = UriBuilder.fromPath("/academicAdministration/studentEnrolments.do");
    builder.queryParam("method", "prepare");
    final String scpID = request.getParameter("scpID");
    final String executionPeriodId = request.getParameter("executionPeriodId");

    if (!Strings.isNullOrEmpty(scpID)) {
        builder.queryParam("scpID", scpID);
    }

    if (!Strings.isNullOrEmpty(executionPeriodId)) {
        builder.queryParam("executionPeriodId", executionPeriodId);
    }

    final String redirectTo = GenericChecksumRewriter.injectChecksumInUrl(request.getContextPath(), builder.toString(), request.getSession(false));
    
    final ActionForward actionForward = new ActionForward();
    actionForward.setModule("/");
    actionForward.setPath(redirectTo);
    actionForward.setRedirect(true);

    return actionForward;
}
 

public void doGet(HttpServletRequest request, HttpServletResponse response) throws IOException{
    try{
        String returnURL = request.getParameter("returnURL");
        
        /******Struts ActionForward vulnerable code tests******/
        ActionForward forward = new ActionForward(returnURL); //BAD

        ActionForward forward2 = new ActionForward(returnURL, true); //BAD

        ActionForward forward3 = new ActionForward("name", returnURL, true); //BAD

        ActionForward forward4 = new ActionForward("name", returnURL, true, true); //BAD

        ActionForward forward5 = new ActionForward();
        forward5.setPath(returnURL); //BAD

        //false positive test - returnURL moved from path to name (safe argument)
        ActionForward forward6 = new ActionForward(returnURL, "path", true); //OK
        
        /******Spring ModelAndView vulnerable code tests******/
        ModelAndView mv = new ModelAndView(returnURL); //BAD
                   
        ModelAndView mv2 = new ModelAndView(returnURL, new HashMap()); //BAD

        ModelAndView mv3 = new ModelAndView(returnURL, "modelName", new Object()); //BAD

        ModelAndView mv4 = new ModelAndView();
        mv4.setViewName(returnURL); //BAD
        
        //false positive test - returnURL moved from viewName to modelName (safe argument)
        ModelAndView mv5 = new ModelAndView("viewName", returnURL, new Object()); //OK

    }catch(Exception e){
     System.out.println(e);
   }
}