Closed picimako closed 2 months ago
There are many XML attributes that accept expressions of XPath, JsonPath, and many other languages. Those attribute values could be injected with the proper languages.
Add language injection for following XML tag attributes:
k8s:validate.k8s:element@path
message.expression@path
message
type
message.validate.json-path@expression
zookeeper:info.zookeeper:validate.zookeeper:json-path@expression
receive.validate.xpath@expression
receive.message.validate.xpath@expression
step@given/when/then
actions/template.groovy
actions.send/receive.message.builder
variables/create-variables.variable.value.script
message.validate.script
sql.validate.script
transform.xml-data/xslt-data
transform.source/xslt
selenium:javascript.selenium:script
selenium.fill-form.json
Completed in v1.0.16.
Summary
There are many XML attributes that accept expressions of XPath, JsonPath, and many other languages. Those attribute values could be injected with the proper languages.
Tasks
Add language injection for following XML tag attributes:
k8s:validate.k8s:element@path
in 'http://www.citrusframework.org/schema/kubernetes/testcase'message.expression@path
in XML when the siblingmessage
tag'stype
attribute is jsonmessage.validate.json-path@expression
in Spring XMLzookeeper:info.zookeeper:validate.zookeeper:json-path@expression
in 'http://www.citrusframework.org/schema/zookeeper/testcase'receive.validate.xpath@expression
in XMLsreceive.message.validate.xpath@expression
in Spring XMLsstep@given/when/then
in 'http://www.citrusframework.org/schema/cucumber/testcase'actions/template.groovy
in XML and Spring XML DSLsactions.send/receive.message.builder
when thetype
attribute is set to groovy in Spring XMLsvariables/create-variables.variable.value.script
when thetype
attribute is set to groovy in XML and Spring XML DSLsmessage.validate.script
when itstype
attribute is groovy in Spring XMLssql.validate.script
when itstype
attribute is groovy in Spring XMLstransform.xml-data/xslt-data
in Springtransform.source/xslt
in non-Springselenium:javascript.selenium:script
selenium.fill-form.json
in non-Spring XMLs