This patch contains the HTTP connector that intercepts the requests to the application and tries to communicate with OSG.

It also contains the DOM Injection lesson

git-svn-id: http://webgoat.googlecode.com/svn/trunk@35 4033779f-a91e-0410-96ef-6bf7bf53c507

webgoat/main/project/JavaSource/org/owasp/webgoat/util/Interceptor.java

@@ -0,0 +1,112 @@
+/**
+ * 
+ */
+package org.owasp.webgoat.util;
+
+import java.io.IOException;
+import java.io.BufferedReader;
+import java.io.PrintWriter;
+import java.io.InputStreamReader;
+import java.net.UnknownHostException;
+
+import java.net.Socket;
+
+import javax.servlet.Filter;
+import javax.servlet.FilterChain;
+import javax.servlet.FilterConfig;
+import javax.servlet.ServletException;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+import javax.servlet.RequestDispatcher;
+import javax.servlet.http.HttpServletRequest;
+
+/**
+ * @author sherif koussa - Macadamian Technologies
+ *
+ */
+public class Interceptor implements Filter {
+
+	private static final String OSG_SERVER_NAME = "OSGServerName";
+	private static final String OSG_SERVER_PORT = "OSGServerPort";
+
+	/* (non-Javadoc)
+	 * @see javax.servlet.Filter#destroy()
+	 */
+	public void destroy() {
+		// TODO Auto-generated method stub
+
+	}
+
+	public void doFilter(ServletRequest request, ServletResponse response,
+			FilterChain chain) throws IOException, ServletException {
+
+        HttpServletRequest req = (HttpServletRequest)request;
+
+	    Socket osgSocket = null;
+        PrintWriter out = null;
+        BufferedReader in = null;
+		String osgServerName = req.getSession().getServletContext().getInitParameter(OSG_SERVER_NAME);
+		String osgServerPort = req.getSession().getServletContext().getInitParameter(OSG_SERVER_PORT);
+
+        try {
+        	//If these parameters are not defined then no communication will happen with OSG
+    		if (osgServerName != null && osgServerName.length() != 0 &&
+    				osgServerPort != null && osgServerPort.length() != 0 )
+    		{
+    			osgSocket = new Socket(osgServerName, Integer.parseInt(osgServerPort));
+            	if ( osgSocket != null )
+            	{
+                    out = new PrintWriter(osgSocket.getOutputStream(), true);
+                    in = new BufferedReader(new InputStreamReader(
+                    		osgSocket.getInputStream()));
+                    //String message = "HTTPRECEIVEHTTPREQUEST,-,DataValidation_SqlInjection_Basic.aspx";
+                    //out.println(message);
+                    
+                    //System.out.println(in.readLine());
+            	}    			
+    		}
+    		
+        } 
+        catch (UnknownHostException e) 
+        {
+            e.printStackTrace();
+            
+        } 
+        catch (IOException e) 
+        {
+        	e.printStackTrace();
+        }
+        finally
+        {
+        	if (out != null)
+        	{
+        		out.close();	
+        	}
+        	if (in != null)
+        	{
+        		in.close();
+        	}
+        	if (osgSocket != null)
+        	{
+        		osgSocket.close();	
+        	}        	
+        }
+	    
+	    String url = req.getRequestURL().toString();
+	    
+	    RequestDispatcher disp = req.getRequestDispatcher(url.substring(url.lastIndexOf("WebGoat/") + "WebGoat".length()));
+	   
+	    disp.forward(request, response);
+	    
+	}
+
+	/* (non-Javadoc)
+	 * @see javax.servlet.Filter#init(javax.servlet.FilterConfig)
+	 */
+	public void init(FilterConfig arg0) throws ServletException {
+		// TODO Auto-generated method stub
+
+	}
+
+}
+