+ +##### Threads in Mock +  \ No newline at end of file diff --git a/mispmock/src/com/olexyn/misp/mock/AdapterMock.java b/mispmock/src/com/olexyn/misp/mock/AdapterMock.java new file mode 100644 index 0000000..f8cfe9b --- /dev/null +++ b/mispmock/src/com/olexyn/misp/mock/AdapterMock.java @@ -0,0 +1,99 @@ +package com.olexyn.misp.mock; + +import com.olexyn.misp.helper.Ride; +import com.olexyn.misp.mock.exchange.ExchangeMock; +import com.olexyn.misp.adapter.Adapter; + +import javax.servlet.ServletException; +import java.io.IOException; + + +/** + * Wraps a ClientServlet so it can be debugged easily, i.e. without running Tomcat. + */ +public class AdapterMock extends Adapter { + + private MockSet mockSet; + + + public AdapterMock(MockSet mockSet) { + super(); + mockSet.adapterMock = this; + this.mockSet = mockSet; + } + + /** + * Send POST (Ride). + * Parse response. + */ + @Override + protected Ride doSendPostRide(Ride ride) throws IOException, InterruptedException, ServletException { + + // Mock Exchange + final ExchangeMock exchange = new ExchangeMock(); + exchange.request.setMethod("POST"); + exchange.request.setContentType("application/json"); + exchange.request.setContent(ride.json().getBytes()); + + synchronized (exchange) { + // Mock POST (Ride) + exchange.notify(); + mockSet.bridgeMock.doPost(exchange.request, exchange.response); + exchange.wait(); + exchange.notify(); + } + + // handle OK (Ride)(Request) + return new Ride(exchange.response.getContentAsString()); + } + + + /** + * Send GET (Request) to App. + * Parse response. + */ + @Override + protected String doSendGetRequest(String request) throws IOException { + + // Mock Exchange + final ExchangeMock exchange = new ExchangeMock(); + + exchange.request.setMethod("GET"); + exchange.request.setContent(request.getBytes()); + + synchronized (exchange) { + // Mock GET (Request) + exchange.notify(); + mockSet.appMock.doGet(exchange.request, exchange.response); + + // handle OK (Data) + exchange.notify(); + } + + return exchange.response.getContentAsString(); + } + + + /** + * Send GET (Ride)(Request)(Data). + * Parse response. + */ + @Override + protected void doSendGetRideRequest(Ride ride) throws IOException, InterruptedException { + + // Mock Exchange + final ExchangeMock exchange = new ExchangeMock(); + exchange.request.setMethod("GET"); + exchange.request.setContentType("application/json"); + exchange.request.setContent(ride.json().getBytes()); + + synchronized (exchange) { + // Mock GET (Ride)(Request)(Data) + exchange.notify(); + mockSet.bridgeMock.doGet(exchange.request, exchange.response); + exchange.wait(); + exchange.notify(); + } + } + +} \ No newline at end of file diff --git a/mispmock/src/com/olexyn/misp/mock/AdapterRunnable.java b/mispmock/src/com/olexyn/misp/mock/AdapterRunnable.java new file mode 100644 index 0000000..7cf08fa --- /dev/null +++ b/mispmock/src/com/olexyn/misp/mock/AdapterRunnable.java @@ -0,0 +1,20 @@ +package com.olexyn.misp.mock; + +/** + * Pass the MockSet. + * Provide a Runnable. + */ +public class AdapterRunnable implements Runnable { + + private MockSet mockSet; + + public AdapterRunnable(MockSet mockSet){ + super(); + this.mockSet = mockSet; + } + + @Override + public void run() { + new AdapterMock(mockSet); + } +} diff --git a/mispmock/src/com/olexyn/misp/mock/BridgeMock.java b/mispmock/src/com/olexyn/misp/mock/BridgeMock.java new file mode 100644 index 0000000..4948a5c --- /dev/null +++ b/mispmock/src/com/olexyn/misp/mock/BridgeMock.java @@ -0,0 +1,84 @@ +package com.olexyn.misp.mock; + + +import com.olexyn.misp.mock.exchange.ExchangeMock; +import com.olexyn.misp.mock.exchange.RequestMock; +import com.olexyn.misp.bridge.BridgeServlet; + + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.io.IOException; + +public class BridgeMock extends BridgeServlet { + + public BridgeMock(MockSet mockSet) { + super(); + mockSet.bridgeMock = this; + } + + + /** + * handle GET (Request)
+ * - wait for availableRides to have an entry
+ * - move move Ride to deliveredRides
+ * - wait for Ride to have Data
+ * - respond to the original request with Data + */ + @Override + protected void handleGetRequest(HttpServletRequest request, HttpServletResponse response) throws IOException, InterruptedException { + + final ExchangeMock exchange; + + synchronized (exchange = ((RequestMock) request).exchange) { + + super.handleGetRequest(request,response); + + exchange.notify(); + } + } + + + /** + * handle GET (Ride)(Data) + * if Ride in ForwardedRequest + * remove Ride from ForwardedRequest + * add Ride to NewData + * send OK (Ride)(Data) + * remove Ride from NewData + * add Ride to ForwardedData + * send OK (EOL) + * remove Ride from ForwardedData + * add Ride to EOL + */ + protected void handleGetRideRequestData(HttpServletRequest request, HttpServletResponse response) throws IOException, InterruptedException { + + final ExchangeMock exchange; + + synchronized (exchange = ((RequestMock) request).exchange) { + + super.handleGetRideRequestData(request,response); + + exchange.notify(); + } + } + + + /** + * handle POST (Ride) + * - wait for Ride to be booked + * - send OK to Client + */ + @Override + protected void handlePostRide(HttpServletRequest request, HttpServletResponse response) throws IOException, InterruptedException { + + final ExchangeMock exchange; + + synchronized (exchange = ((RequestMock) request).exchange) { + + super.handlePostRide(request,response); + + exchange.notify(); + } + } +} diff --git a/mispmock/src/com/olexyn/misp/mock/BridgeRunnable.java b/mispmock/src/com/olexyn/misp/mock/BridgeRunnable.java new file mode 100644 index 0000000..8874863 --- /dev/null +++ b/mispmock/src/com/olexyn/misp/mock/BridgeRunnable.java @@ -0,0 +1,21 @@ +package com.olexyn.misp.mock; + +/** + * Pass the MockSet. + * Provide a Runnable. + */ +public class BridgeRunnable implements Runnable { + + MockSet mockSet; + + public BridgeRunnable(MockSet mockSet){ + super(); + this.mockSet = mockSet; + } + + @Override + public void run() { + new BridgeMock(mockSet); + } + +} diff --git a/mispmock/src/com/olexyn/misp/mock/Main.java b/mispmock/src/com/olexyn/misp/mock/Main.java new file mode 100644 index 0000000..5274457 --- /dev/null +++ b/mispmock/src/com/olexyn/misp/mock/Main.java @@ -0,0 +1,42 @@ +package com.olexyn.misp.mock; + +import com.olexyn.misp.mock.actor.AppMock; +import com.olexyn.misp.mock.actor.UserMock; + +public class Main { + + + + + + public static void main(String... args){ + + MockSet mockSet = new MockSet(); + + Runnable publicRunnable = new UserMock(mockSet); + Runnable bridgeRunable = new BridgeRunnable(mockSet); + Runnable adapterRunnable = new AdapterRunnable(mockSet); + //Runnable clientRunnable = new ClientRunnable(mockSet); + Runnable appRunnable = new AppMock(mockSet); + + Thread userThread = new Thread(publicRunnable); + Thread bridgeThread = new Thread(bridgeRunable); + Thread adapterThread = new Thread(adapterRunnable); + //Thread clientThread = new Thread(clientRunnable); + Thread appThread = new Thread(appRunnable); + + userThread.setName("userThread"); + userThread.start(); + bridgeThread.setName("bridgeThread"); + bridgeThread.start(); + adapterThread.setName("adapterThread"); + adapterThread.start(); + //clientThread.setName("clientThread"); + //clientThread.start(); + appThread.setName("appThread"); + appThread.start(); + } +} + + + diff --git a/mispmock/src/com/olexyn/misp/mock/MockSet.java b/mispmock/src/com/olexyn/misp/mock/MockSet.java new file mode 100644 index 0000000..533a1ec --- /dev/null +++ b/mispmock/src/com/olexyn/misp/mock/MockSet.java @@ -0,0 +1,11 @@ +package com.olexyn.misp.mock; + +import com.olexyn.misp.mock.actor.AppMock; +import com.olexyn.misp.mock.actor.UserMock; + +public class MockSet { + public UserMock userMock; + public BridgeMock bridgeMock; + public AdapterMock adapterMock; + public AppMock appMock; +} \ No newline at end of file diff --git a/mispmock/src/com/olexyn/misp/mock/actor/ActorRunnable.java b/mispmock/src/com/olexyn/misp/mock/actor/ActorRunnable.java new file mode 100644 index 0000000..115db66 --- /dev/null +++ b/mispmock/src/com/olexyn/misp/mock/actor/ActorRunnable.java @@ -0,0 +1,57 @@ +package com.olexyn.misp.mock.actor; + +import com.olexyn.misp.mock.MockSet; +import com.olexyn.misp.mock.exchange.ExchangeMock; + +import javax.servlet.ServletException; +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.io.IOException; +import java.util.ArrayList; +import java.util.List; + + + +/** + * Generic Runnable. + * Serves as basis for Actors that are not Servlets. + */ +public abstract class ActorRunnable implements Runnable { + + + List
+ *
+ * An "exchange" corresponds to request & reply pair.
+ * - i.e. a GET & OK pair.
+ * Steps:
+ * 1. new Exchange()
+ * 2. set properties of .request
+ * 3. "send" request by using exchange.notify(); recipient.doGet();
+ * 4. recipient does someting with request
+ * - - recipient sets proerties of .response
+ * - - recipient sends reply using exchange.notify();
+ * 5. "receive" response by using exchange.wait(); + */ +public class ExchangeMock { + + public static List
- * The following init parameters are used to configure this servlet: - *
-
- *
- cgibinResourceBase - *
- Path to the cgi bin directory if set or it will default to the resource base of the context. - *
- resourceBase - *
- An alias for cgibinResourceBase. - *
- cgibinResourceBaseIsRelative - *
- If true then cgibinResourceBase is relative to the webapp (eg "WEB-INF/cgi") - *
- commandPrefix - *
- may be used to set a prefix to all commands passed to exec. This can be used on systems that need assistance to execute a - * particular file type. For example on windows this can be set to "perl" so that perl scripts are executed. - *
- Path - *
- passed to the exec environment as PATH. - *
- ENV_* - *
- used to set an arbitrary environment variable with the name stripped of the leading ENV_ and using the init parameter value - *
- useFullPath - *
- If true, the full URI path within the context is used for the exec command, otherwise a search is done for a partial URL that matches an exec Command - *
- ignoreExitState - *
- If true then do not act on a non-zero exec exit status") - *
This servlet may be used to concatenate multiple resources into - * a single response.
- *It is intended to be used to load multiple - * javascript or css files, but may be used for any content of the - * same mime type that can be meaningfully concatenated.
- *The servlet uses {@link RequestDispatcher#include(javax.servlet.ServletRequest, javax.servlet.ServletResponse)} - * to combine the requested content, so dynamically generated content - * may be combined (Eg engine.js for DWR).
- *The servlet uses parameter names of the query string as resource names - * relative to the context root. So these script tags:
- *- * <script type="text/javascript" src="../js/behaviour.js"></script> - * <script type="text/javascript" src="../js/ajax.js"></script> - * <script type="text/javascript" src="../chat/chat.js"></script> - *- *
can be replaced with the single tag (with the {@code ConcatServlet} - * mapped to {@code /concat}):
- *- * <script type="text/javascript" src="../concat?/js/behaviour.js&/js/ajax.js&/chat/chat.js"></script> - *- *
The {@link ServletContext#getMimeType(String)} method is used to determine the - * mime type of each resource. If the types of all resources do not match, then a 415 - * UNSUPPORTED_MEDIA_TYPE error is returned.
- *If the init parameter {@code development} is set to {@code true} then the servlet - * will run in development mode and the content will be concatenated on every request.
- *Otherwise the init time of the servlet is used as the lastModifiedTime of the combined content - * and If-Modified-Since requests are handled with 304 NOT Modified responses if - * appropriate. This means that when not in development mode, the servlet must be - * restarted before changed content will be served.
- */ -public class ConcatServlet extends HttpServlet -{ - private boolean _development; - private long _lastModified; - - @Override - public void init() throws ServletException - { - _lastModified = System.currentTimeMillis(); - _development = Boolean.parseBoolean(getInitParameter("development")); - } - - /* - * @return The start time of the servlet unless in development mode, in which case -1 is returned. - */ - @Override - protected long getLastModified(HttpServletRequest req) - { - return _development ? -1 : _lastModified; - } - - @Override - protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException - { - String query = request.getQueryString(); - if (query == null) - { - response.sendError(HttpServletResponse.SC_NO_CONTENT); - return; - } - - List- * A typical example is to use this filter to allow cross-domain - * cometd communication using the standard - * long polling transport instead of the JSONP transport (that is less - * efficient and less reactive to failures). - *
- * This filter allows the following configuration parameters: - *
-
- *
- allowedOrigins - *
- a comma separated list of origins that are
- * allowed to access the resources. Default value is *, meaning all
- * origins. Note that using wild cards can result in security problems
- * for requests identifying hosts that do not exist.
- *
- * If an allowed origin contains one or more * characters (for example - * http://*.domain.com), then "*" characters are converted to ".*", "." - * characters are escaped to "\." and the resulting allowed origin - * interpreted as a regular expression. - *
- * Allowed origins can therefore be more complex expressions such as - * https?://*.domain.[a-z]{3} that matches http or https, multiple subdomains - * and any 3 letter top-level domain (.com, .net, .org, etc.).
- *
- * - allowedTimingOrigins - *
- a comma separated list of origins that are
- * allowed to time the resource. Default value is the empty string, meaning
- * no origins.
- *
- * The check whether the timing header is set, will be performed only if - * the user gets general access to the resource using the allowedOrigins. - * - *
- allowedMethods - *
- a comma separated list of HTTP methods that - * are allowed to be used when accessing the resources. Default value is - * GET,POST,HEAD - * - * - *
- allowedHeaders - *
- a comma separated list of HTTP headers that - * are allowed to be specified when accessing the resources. Default value - * is X-Requested-With,Content-Type,Accept,Origin. If the value is a single "*", - * this means that any headers will be accepted. - * - *
- preflightMaxAge - *
- the number of seconds that preflight requests - * can be cached by the client. Default value is 1800 seconds, or 30 - * minutes - * - *
- allowCredentials - *
- a boolean indicating if the resource allows - * requests with credentials. Default value is true - * - *
- exposedHeaders - *
- a comma separated list of HTTP headers that - * are allowed to be exposed on the client. Default value is the - * empty list - * - *
- chainPreflight - *
- if true preflight requests are chained to their - * target resource for normal handling (as an OPTION request). Otherwise the - * filter will response to the preflight. Default is true. - * - *
- * <web-app ...> - * ... - * <filter> - * <filter-name>cross-origin</filter-name> - * <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class> - * </filter> - * <filter-mapping> - * <filter-name>cross-origin</filter-name> - * <url-pattern>/cometd/*</url-pattern> - * </filter-mapping> - * ... - * </web-app> - *- */ -public class CrossOriginFilter implements Filter -{ - private static final Logger LOG = LoggerFactory.getLogger(CrossOriginFilter.class); - - // Request headers - private static final String ORIGIN_HEADER = "Origin"; - public static final String ACCESS_CONTROL_REQUEST_METHOD_HEADER = "Access-Control-Request-Method"; - public static final String ACCESS_CONTROL_REQUEST_HEADERS_HEADER = "Access-Control-Request-Headers"; - // Response headers - public static final String ACCESS_CONTROL_ALLOW_ORIGIN_HEADER = "Access-Control-Allow-Origin"; - public static final String ACCESS_CONTROL_ALLOW_METHODS_HEADER = "Access-Control-Allow-Methods"; - public static final String ACCESS_CONTROL_ALLOW_HEADERS_HEADER = "Access-Control-Allow-Headers"; - public static final String ACCESS_CONTROL_MAX_AGE_HEADER = "Access-Control-Max-Age"; - public static final String ACCESS_CONTROL_ALLOW_CREDENTIALS_HEADER = "Access-Control-Allow-Credentials"; - public static final String ACCESS_CONTROL_EXPOSE_HEADERS_HEADER = "Access-Control-Expose-Headers"; - public static final String TIMING_ALLOW_ORIGIN_HEADER = "Timing-Allow-Origin"; - // Implementation constants - public static final String ALLOWED_ORIGINS_PARAM = "allowedOrigins"; - public static final String ALLOWED_TIMING_ORIGINS_PARAM = "allowedTimingOrigins"; - public static final String ALLOWED_METHODS_PARAM = "allowedMethods"; - public static final String ALLOWED_HEADERS_PARAM = "allowedHeaders"; - public static final String PREFLIGHT_MAX_AGE_PARAM = "preflightMaxAge"; - public static final String ALLOW_CREDENTIALS_PARAM = "allowCredentials"; - public static final String EXPOSED_HEADERS_PARAM = "exposedHeaders"; - public static final String OLD_CHAIN_PREFLIGHT_PARAM = "forwardPreflight"; - public static final String CHAIN_PREFLIGHT_PARAM = "chainPreflight"; - private static final String ANY_ORIGIN = "*"; - private static final String DEFAULT_ALLOWED_ORIGINS = "*"; - private static final String DEFAULT_ALLOWED_TIMING_ORIGINS = ""; - private static final List
- * Two implementations are supported:
-
- *
- The
StandardDataStreamimpl uses only standard - * APIs, but produces more garbage due to the byte[] nature of the API. - * - the
JettyDataStreamimpl uses a Jetty API to write a ByteBuffer - * and thus allow the efficient use of file mapped buffers without any - * temporary buffer copies (I did tell the JSR that this was a good idea to - * have in the standard!). - *
- * The data rate is controlled by setting init parameters: - *
-
- *
- buffersize
- The amount of data in bytes written per write - *
- pause
- The period in ms to wait after a write before attempting another - *
- pool
- The size of the thread pool used to service the writes (defaults to available processors) - *
- * This filter is useful for limiting - * exposure to abuse from request flooding, whether malicious, or as a result of - * a misconfigured client. - *
- * The filter keeps track of the number of requests from a connection per - * second. If a limit is exceeded, the request is either rejected, delayed, or - * throttled. - *
- * When a request is throttled, it is placed in a priority queue. Priority is - * given first to authenticated users and users with an HttpSession, then - * connections which can be identified by their IP addresses. Connections with - * no way to identify them are given lowest priority. - *
- * The {@link #extractUserId(ServletRequest request)} function should be - * implemented, in order to uniquely identify authenticated users. - *
- * The following init parameters control the behavior of the filter: - *
-
- *
- maxRequestsPerSec - *
- the maximum number of requests from a connection per - * second. Requests in excess of this are first delayed, - * then throttled. - *
- delayMs - *
- is the delay given to all requests over the rate limit, - * before they are considered at all. -1 means just reject request, - * 0 means no delay, otherwise it is the delay. - *
- maxWaitMs - *
- how long to blocking wait for the throttle semaphore. - *
- throttledRequests - *
- is the number of requests over the rate limit able to be - * considered at once. - *
- throttleMs - *
- how long to async wait for semaphore. - *
- maxRequestMs - *
- how long to allow this request to run. - *
- maxIdleTrackerMs - *
- how long to keep track of request rates for a connection, - * before deciding that the user has gone away, and discarding it - *
- insertHeaders - *
- if true , insert the DoSFilter headers into the response. Defaults to true. - *
- trackSessions - *
- if true, usage rate is tracked by session if a session exists. Defaults to true. - *
- remotePort - *
- if true and session tracking is not used, then rate is tracked by IP+port (effectively connection). Defaults to false. - *
- ipWhitelist - *
- a comma-separated list of IP addresses that will not be rate limited - *
- managedAttr - *
- if set to true, then this servlet is set as a {@link ServletContext} attribute with the - * filter name as the attribute name. This allows context external mechanism (eg JMX via {@link ContextHandler#MANAGED_ATTRIBUTES}) to - * manage the configuration of the filter. - *
- tooManyCode - *
- The status code to send if there are too many requests. By default is 429 (too many requests), but 503 (Unavailable) is - * another option - *
- * This filter should be configured for {@link DispatcherType#REQUEST} and {@link DispatcherType#ASYNC} and with
- * {@code
- * By default, an HTTP 503 response is returned and the handling thread is interrupted. - * - * @param request the current request - * @param response the current response - * @param handlingThread the handling thread - */ - protected void onRequestTimeout(HttpServletRequest request, HttpServletResponse response, Thread handlingThread) - { - try - { - if (LOG.isDebugEnabled()) - LOG.debug("Timing out {}", request); - try - { - response.sendError(HttpStatus.SERVICE_UNAVAILABLE_503); - } - catch (IllegalStateException ise) - { - LOG.trace("IGNORED", ise); - // abort instead - response.sendError(-1); - } - } - catch (Throwable x) - { - LOG.info("Failed to sendError", x); - } - - handlingThread.interrupt(); - } - - /** - * Get priority for this request, based on user type - * - * @param request the current request - * @param tracker the rate tracker for this request - * @return the priority for this request - */ - private int getPriority(HttpServletRequest request, RateTracker tracker) - { - if (extractUserId(request) != null) - return USER_AUTH; - if (tracker != null) - return tracker.getType(); - return USER_UNKNOWN; - } - - /** - * @return the maximum priority that we can assign to a request - */ - protected int getMaxPriority() - { - return USER_AUTH; - } - - private void schedule(RateTracker tracker) - { - _scheduler.schedule(tracker, getMaxIdleTrackerMs(), TimeUnit.MILLISECONDS); - } - - /** - * Return a request rate tracker associated with this connection; keeps - * track of this connection's request rate. If this is not the first request - * from this connection, return the existing object with the stored stats. - * If it is the first request, then create a new request tracker. - *
- * Assumes that each connection has an identifying characteristic, and goes - * through them in order, taking the first that matches: user id (logged - * in), session id, client IP address. Unidentifiable connections are lumped - * into one. - *
- * When a session expires, its rate tracker is automatically deleted.
- *
- * @param request the current request
- * @return the request rate tracker for the current connection
- */
- RateTracker getRateTracker(ServletRequest request)
- {
- HttpSession session = ((HttpServletRequest)request).getSession(false);
-
- String loadId = extractUserId(request);
- final int type;
- if (loadId != null)
- {
- type = USER_AUTH;
- }
- else
- {
- if (isTrackSessions() && session != null && !session.isNew())
- {
- loadId = session.getId();
- type = USER_SESSION;
- }
- else
- {
- loadId = isRemotePort() ? createRemotePortId(request) : request.getRemoteAddr();
- type = USER_IP;
- }
- }
-
- RateTracker tracker = _rateTrackers.get(loadId);
-
- if (tracker == null)
- {
- boolean allowed = checkWhitelist(request.getRemoteAddr());
- int maxRequestsPerSec = getMaxRequestsPerSec();
- tracker = allowed ? new FixedRateTracker(_context, _name, loadId, type, maxRequestsPerSec)
- : new RateTracker(_context, _name, loadId, type, maxRequestsPerSec);
- tracker.setContext(_context);
- RateTracker existing = _rateTrackers.putIfAbsent(loadId, tracker);
- if (existing != null)
- tracker = existing;
-
- if (type == USER_IP)
- {
- // USER_IP expiration from _rateTrackers is handled by the _scheduler
- _scheduler.schedule(tracker, getMaxIdleTrackerMs(), TimeUnit.MILLISECONDS);
- }
- else if (session != null)
- {
- // USER_SESSION expiration from _rateTrackers are handled by the HttpSessionBindingListener
- session.setAttribute(__TRACKER, tracker);
- }
- }
-
- return tracker;
- }
-
- private void addToRateTracker(RateTracker tracker)
- {
- _rateTrackers.put(tracker.getId(), tracker);
- }
-
- public void removeFromRateTracker(String id)
- {
- _rateTrackers.remove(id);
- }
-
- protected boolean checkWhitelist(String candidate)
- {
- for (String address : _whitelist)
- {
- if (address.contains("/"))
- {
- if (subnetMatch(address, candidate))
- return true;
- }
- else
- {
- if (address.equals(candidate))
- return true;
- }
- }
- return false;
- }
-
- protected boolean subnetMatch(String subnetAddress, String address)
- {
- Matcher cidrMatcher = CIDR_PATTERN.matcher(subnetAddress);
- if (!cidrMatcher.matches())
- return false;
-
- String subnet = cidrMatcher.group(1);
- int prefix;
- try
- {
- prefix = Integer.parseInt(cidrMatcher.group(2));
- }
- catch (NumberFormatException x)
- {
- LOG.info("Ignoring malformed CIDR address {}", subnetAddress);
- return false;
- }
-
- byte[] subnetBytes = addressToBytes(subnet);
- if (subnetBytes == null)
- {
- LOG.info("Ignoring malformed CIDR address {}", subnetAddress);
- return false;
- }
- byte[] addressBytes = addressToBytes(address);
- if (addressBytes == null)
- {
- LOG.info("Ignoring malformed remote address {}", address);
- return false;
- }
-
- // Comparing IPv4 with IPv6 ?
- int length = subnetBytes.length;
- if (length != addressBytes.length)
- return false;
-
- byte[] mask = prefixToBytes(prefix, length);
-
- for (int i = 0; i < length; ++i)
- {
- if ((subnetBytes[i] & mask[i]) != (addressBytes[i] & mask[i]))
- return false;
- }
-
- return true;
- }
-
- private byte[] addressToBytes(String address)
- {
- Matcher ipv4Matcher = IPv4_PATTERN.matcher(address);
- if (ipv4Matcher.matches())
- {
- byte[] result = new byte[4];
- for (int i = 0; i < result.length; ++i)
- {
- result[i] = Integer.valueOf(ipv4Matcher.group(i + 1)).byteValue();
- }
- return result;
- }
- else
- {
- Matcher ipv6Matcher = IPv6_PATTERN.matcher(address);
- if (ipv6Matcher.matches())
- {
- byte[] result = new byte[16];
- for (int i = 0; i < result.length; i += 2)
- {
- int word = Integer.parseInt(ipv6Matcher.group(i / 2 + 1), 16);
- result[i] = (byte)((word & 0xFF00) >>> 8);
- result[i + 1] = (byte)(word & 0xFF);
- }
- return result;
- }
- }
- return null;
- }
-
- private byte[] prefixToBytes(int prefix, int length)
- {
- byte[] result = new byte[length];
- int index = 0;
- while (prefix / 8 > 0)
- {
- result[index] = -1;
- prefix -= 8;
- ++index;
- }
-
- if (index == result.length)
- return result;
-
- // Sets the _prefix_ most significant bits to 1
- result[index] = (byte)~((1 << (8 - prefix)) - 1);
- return result;
- }
-
- @Override
- public void destroy()
- {
- LOG.debug("Destroy {}", this);
- stopScheduler();
- _rateTrackers.clear();
- _whitelist.clear();
- }
-
- protected void stopScheduler()
- {
- try
- {
- _scheduler.stop();
- }
- catch (Exception x)
- {
- LOG.trace("IGNORED", x);
- }
- }
-
- /**
- * Returns the user id, used to track this connection.
- * This SHOULD be overridden by subclasses.
- *
- * @param request the current request
- * @return a unique user id, if logged in; otherwise null.
- */
- protected String extractUserId(ServletRequest request)
- {
- return null;
- }
-
- /**
- * Get maximum number of requests from a connection per
- * second. Requests in excess of this are first delayed,
- * then throttled.
- *
- * @return maximum number of requests
- */
- @ManagedAttribute("maximum number of requests allowed from a connection per second")
- public int getMaxRequestsPerSec()
- {
- return _maxRequestsPerSec;
- }
-
- /**
- * Get maximum number of requests from a connection per
- * second. Requests in excess of this are first delayed,
- * then throttled.
- *
- * @param value maximum number of requests
- */
- public void setMaxRequestsPerSec(int value)
- {
- _maxRequestsPerSec = value;
- }
-
- /**
- * Get delay (in milliseconds) that is applied to all requests
- * over the rate limit, before they are considered at all.
- *
- * @return the delay in milliseconds
- */
- @ManagedAttribute("delay applied to all requests over the rate limit (in ms)")
- public long getDelayMs()
- {
- return _delayMs;
- }
-
- /**
- * Set delay (in milliseconds) that is applied to all requests
- * over the rate limit, before they are considered at all.
- *
- * @param value delay (in milliseconds), 0 - no delay, -1 - reject request
- */
- public void setDelayMs(long value)
- {
- _delayMs = value;
- }
-
- /**
- * Get maximum amount of time (in milliseconds) the filter will
- * blocking wait for the throttle semaphore.
- *
- * @return maximum wait time
- */
- @ManagedAttribute("maximum time the filter will block waiting throttled connections, (0 for no delay, -1 to reject requests)")
- public long getMaxWaitMs()
- {
- return _maxWaitMs;
- }
-
- /**
- * Set maximum amount of time (in milliseconds) the filter will
- * blocking wait for the throttle semaphore.
- *
- * @param value maximum wait time
- */
- public void setMaxWaitMs(long value)
- {
- _maxWaitMs = value;
- }
-
- /**
- * Get number of requests over the rate limit able to be
- * considered at once.
- *
- * @return number of requests
- */
- @ManagedAttribute("number of requests over rate limit")
- public int getThrottledRequests()
- {
- return _throttledRequests;
- }
-
- /**
- * Set number of requests over the rate limit able to be
- * considered at once.
- *
- * @param value number of requests
- */
- public void setThrottledRequests(int value)
- {
- int permits = _passes == null ? 0 : _passes.availablePermits();
- _passes = new Semaphore((value - _throttledRequests + permits), true);
- _throttledRequests = value;
- }
-
- /**
- * Get amount of time (in milliseconds) to async wait for semaphore.
- *
- * @return wait time
- */
- @ManagedAttribute("amount of time to async wait for semaphore")
- public long getThrottleMs()
- {
- return _throttleMs;
- }
-
- /**
- * Set amount of time (in milliseconds) to async wait for semaphore.
- *
- * @param value wait time
- */
- public void setThrottleMs(long value)
- {
- _throttleMs = value;
- }
-
- /**
- * Get maximum amount of time (in milliseconds) to allow
- * the request to process.
- *
- * @return maximum processing time
- */
- @ManagedAttribute("maximum time to allow requests to process (in ms)")
- public long getMaxRequestMs()
- {
- return _maxRequestMs;
- }
-
- /**
- * Set maximum amount of time (in milliseconds) to allow
- * the request to process.
- *
- * @param value maximum processing time
- */
- public void setMaxRequestMs(long value)
- {
- _maxRequestMs = value;
- }
-
- /**
- * Get maximum amount of time (in milliseconds) to keep track
- * of request rates for a connection, before deciding that
- * the user has gone away, and discarding it.
- *
- * @return maximum tracking time
- */
- @ManagedAttribute("maximum time to track of request rates for connection before discarding")
- public long getMaxIdleTrackerMs()
- {
- return _maxIdleTrackerMs;
- }
-
- /**
- * Set maximum amount of time (in milliseconds) to keep track
- * of request rates for a connection, before deciding that
- * the user has gone away, and discarding it.
- *
- * @param value maximum tracking time
- */
- public void setMaxIdleTrackerMs(long value)
- {
- _maxIdleTrackerMs = value;
- }
-
- /**
- * The unique name of the filter when there is more than
- * one DosFilter instance.
- *
- * @return the name
- */
- public String getName()
- {
- return _name;
- }
-
- /**
- * @param name the name to set
- */
- public void setName(String name)
- {
- _name = name;
- }
-
- /**
- * Check flag to insert the DoSFilter headers into the response.
- *
- * @return value of the flag
- */
- @ManagedAttribute("inser DoSFilter headers in response")
- public boolean isInsertHeaders()
- {
- return _insertHeaders;
- }
-
- /**
- * Set flag to insert the DoSFilter headers into the response.
- *
- * @param value value of the flag
- */
- public void setInsertHeaders(boolean value)
- {
- _insertHeaders = value;
- }
-
- /**
- * Get flag to have usage rate tracked by session if a session exists.
- *
- * @return value of the flag
- */
- @ManagedAttribute("usage rate is tracked by session if one exists")
- public boolean isTrackSessions()
- {
- return _trackSessions;
- }
-
- /**
- * Set flag to have usage rate tracked by session if a session exists.
- *
- * @param value value of the flag
- */
- public void setTrackSessions(boolean value)
- {
- _trackSessions = value;
- }
-
- /**
- * Get flag to have usage rate tracked by IP+port (effectively connection)
- * if session tracking is not used.
- *
- * @return value of the flag
- */
- @ManagedAttribute("usage rate is tracked by IP+port is session tracking not used")
- public boolean isRemotePort()
- {
- return _remotePort;
- }
-
- /**
- * Set flag to have usage rate tracked by IP+port (effectively connection)
- * if session tracking is not used.
- *
- * @param value value of the flag
- */
- public void setRemotePort(boolean value)
- {
- _remotePort = value;
- }
-
- /**
- * @return whether this filter is enabled
- */
- @ManagedAttribute("whether this filter is enabled")
- public boolean isEnabled()
- {
- return _enabled;
- }
-
- /**
- * @param enabled whether this filter is enabled
- */
- public void setEnabled(boolean enabled)
- {
- _enabled = enabled;
- }
-
- public int getTooManyCode()
- {
- return _tooManyCode;
- }
-
- public void setTooManyCode(int tooManyCode)
- {
- _tooManyCode = tooManyCode;
- }
-
- /**
- * Get a list of IP addresses that will not be rate limited.
- *
- * @return comma-separated whitelist
- */
- @ManagedAttribute("list of IPs that will not be rate limited")
- public String getWhitelist()
- {
- StringBuilder result = new StringBuilder();
- for (Iterator {@link EventSource} is the passive half of an event source connection, as defined by the
- * EventSource Specification. {@link EventSource.Emitter} is the active half of the connection and allows to operate on the connection. {@link EventSource} allows applications to be notified of events happening on the connection;
- * two events are being notified: the opening of the event source connection, where method
- * {@link EventSource#onOpen(Emitter)} is invoked, and the closing of the event source connection,
- * where method {@link EventSource#onClose()} is invoked. Callback method invoked when an event source connection is opened. Callback method invoked when an event source connection is closed. {@link Emitter} is the active half of an event source connection, and allows applications
- * to operate on the connection by sending events, data or comments, or by closing the connection. An {@link Emitter} instance will be created for each new event source connection. {@link Emitter} instances are fully thread safe and can be used from multiple threads. Sends a named event with data to the client. When invoked as: Sends a default event with data to the client. When invoked as: When invoked as: Sends a comment to the client. When invoked as: Closes this event source connection. A servlet that implements the event source protocol,
- * also known as "server sent events". This servlet must be subclassed to implement abstract method {@link #newEventSource(HttpServletRequest)}
- * to return an instance of {@link EventSource} that allows application to listen for event source events
- * and to emit event source events. This servlet supports the following configuration parameters: NOTE: there is currently no support for
- * This filter sets or adds a header to the response.
- *
- * The {@code headerConfig} init param is a CSV of actions to perform on headers, with the following syntax:
- * Below is an example value for
- * This is an abstract filter which helps with filtering based on include/exclude of paths, mime types, and/or http methods.
- *
- * Use the {@link #shouldFilter(HttpServletRequest, HttpServletResponse)} method to determine if a request/response should be filtered. If mime types are used,
- * it should be called after {@link javax.servlet.FilterChain#doFilter(javax.servlet.ServletRequest, javax.servlet.ServletResponse)} since the mime type may not
- * be written until then.
- *
- * Supported init params:
- *
- * Path spec rules:
- *
- * CSVs are parsed with {@link StringUtil#csvSplit(String)}
- *
- * @see PathSpecSet
- * @see IncludeExcludeSet
- */
-public abstract class IncludeExcludeBasedFilter implements Filter
-{
- private final IncludeExclude A filter that builds a cache of secondary resources associated
- * to primary resources. A typical request for a primary resource such as {@code index.html}
- * is immediately followed by a number of requests for secondary resources.
- * Secondary resource requests will have a {@code Referer} HTTP header
- * that points to {@code index.html}, which is used to associate the secondary
- * resource to the primary resource. Only secondary resources that are requested within a (small) time period
- * from the request of the primary resource are associated with the primary
- * resource. This allows to build a cache of secondary resources associated with
- * primary resources. When a request for a primary resource arrives, associated
- * secondary resources are pushed to the client, unless the request carries
- * {@code If-xxx} header that hint that the client has the resources in its
- * cache. If the init param useQueryInKey is set, then the query string is used as
- * as part of the key to identify a resource
- * This filter limits the number of active requests to the number set by the "maxRequests" init parameter (default 10).
- * If more requests are received, they are suspended and placed on priority queues. Priorities are determined by
- * the {@link #getPriority(ServletRequest)} method and are a value between 0 and the value given by the "maxPriority"
- * init parameter (default 10), with higher values having higher priority.
- *
- * This filter is ideal to prevent wasting threads waiting for slow/limited
- * resources such as a JDBC connection pool. It avoids the situation where all of a
- * containers thread pool may be consumed blocking on such a slow resource.
- * By limiting the number of active threads, a smaller thread pool may be used as
- * the threads are not wasted waiting. Thus more memory may be available for use by
- * the active threads.
- *
- * Furthermore, this filter uses a priority when resuming waiting requests. So that if
- * a container is under load, and there are many requests waiting for resources,
- * the {@link #getPriority(ServletRequest)} method is used, so that more important
- * requests are serviced first. For example, this filter could be deployed with a
- * maxRequest limit slightly smaller than the containers thread pool and a high priority
- * allocated to admin users. Thus regardless of load, admin users would always be
- * able to access the web application.
- *
- * The maxRequest limit is policed by a {@link Semaphore} and the filter will wait a short while attempting to acquire
- * the semaphore. This wait is controlled by the "waitMs" init parameter and allows the expense of a suspend to be
- * avoided if the semaphore is shortly available. If the semaphore cannot be obtained, the request will be suspended
- * for the default suspend period of the container or the valued set as the "suspendMs" init parameter.
- *
- * If the "managedAttr" init parameter is set to true, then this servlet is set as a {@link ServletContext} attribute with the
- * filter name as the attribute name. This allows context external mechanism (eg JMX via {@link ContextHandler#MANAGED_ATTRIBUTES}) to
- * manage the configuration of the filter.
- */
-@ManagedObject("Quality of Service Filter")
-public class QoSFilter implements Filter
-{
- private static final Logger LOG = LoggerFactory.getLogger(QoSFilter.class);
-
- static final int __DEFAULT_MAX_PRIORITY = 10;
- static final int __DEFAULT_PASSES = 10;
- static final int __DEFAULT_WAIT_MS = 50;
- static final long __DEFAULT_TIMEOUT_MS = -1;
-
- static final String MANAGED_ATTR_INIT_PARAM = "managedAttr";
- static final String MAX_REQUESTS_INIT_PARAM = "maxRequests";
- static final String MAX_PRIORITY_INIT_PARAM = "maxPriority";
- static final String MAX_WAIT_INIT_PARAM = "waitMs";
- static final String SUSPEND_INIT_PARAM = "suspendMs";
-
- private final String _suspended = "QoSFilter@" + Integer.toHexString(hashCode()) + ".SUSPENDED";
- private final String _resumed = "QoSFilter@" + Integer.toHexString(hashCode()) + ".RESUMED";
- private long _waitMs;
- private long _suspendMs;
- private int _maxRequests;
- private Semaphore _passes;
- private Queue
- * The default implementation assigns the following priorities:
- * event("foo", "bar"), the client will receive the lines:
- * event: foo
- * data: bar
- *
- *
- * @param name the event name
- * @param data the data to be sent
- * @throws IOException if an I/O failure occurred
- * @see #data(String)
- */
- public void event(String name, String data) throws IOException;
-
- /**
- * data("baz"), the client will receive the line:
- * data: baz
- *
- * data("foo\r\nbar\rbaz\nbax"), the client will receive the lines:
- * data: foo
- * data: bar
- * data: baz
- * data: bax
- *
- *
- * @param data the data to be sent
- * @throws IOException if an I/O failure occurred
- */
- public void data(String data) throws IOException;
-
- /**
- * comment("foo"), the client will receive the line:
- * : foo
- *
- *
- * @param comment the comment to send
- * @throws IOException if an I/O failure occurred
- */
- public void comment(String comment) throws IOException;
-
- /**
- *
- *
- *
- * heartBeatPeriod, that specifies the heartbeat period, in seconds, used to check
- * whether the connection has been closed by the client; defaults to 10 seconds.last-event-id.
- * [action] [header name]: [header value]
- * [action] can be one of set, add, setDate, or addDate
- * The date actions will add the header value in milliseconds to the current system time before setting a date header.
- * headerConfig:
- *
- *
- * set X-Frame-Options: DENY,
- * "add Cache-Control: no-cache, no-store, must-revalidate",
- * setDate Expires: 31540000000,
- * addDate Date: 0
- *
- *
- * @see IncludeExcludeBasedFilter
- */
-public class HeaderFilter extends IncludeExcludeBasedFilter
-{
- private List
- *
- * includedPaths - CSV of path specs to includeexcludedPaths - CSV of path specs to excludeincludedMimeTypes - CSV of mime types to includeexcludedMimeTypes - CSV of mime types to excludeincludedHttpMethods - CSV of http methods to includeexcludedHttpMethods - CSV of http methods to exclude
- *
- * '^' the spec is assumed to be a regex based path spec and will match with normal Java regex rules.'/' the spec is assumed to be a Servlet url-pattern rules path spec for either an exact match or prefix based
- * match.'*.' the spec is assumed to be a Servlet url-pattern rules path spec for a suffix based match.
- *
- */
-public class PutFilter implements Filter
-{
- public static final String __PUT = "PUT";
- public static final String __DELETE = "DELETE";
- public static final String __MOVE = "MOVE";
- public static final String __OPTIONS = "OPTIONS";
-
- Set
- *
- * This method may be overridden to provide application specific priorities.
- *
- * @param request the incoming request
- * @return the computed request priority
- */
- protected int getPriority(ServletRequest request)
- {
- HttpServletRequest baseRequest = (HttpServletRequest)request;
- if (baseRequest.getUserPrincipal() != null)
- {
- return 2;
- }
- else
- {
- HttpSession session = baseRequest.getSession(false);
- if (session != null && !session.isNew())
- return 1;
- else
- return 0;
- }
- }
-
- @Override
- public void destroy()
- {
- }
-
- /**
- * Get the (short) amount of time (in milliseconds) that the filter would wait
- * for the semaphore to become available before suspending a request.
- *
- * @return wait time (in milliseconds)
- */
- @ManagedAttribute("(short) amount of time filter will wait before suspending request (in ms)")
- public long getWaitMs()
- {
- return _waitMs;
- }
-
- /**
- * Set the (short) amount of time (in milliseconds) that the filter would wait
- * for the semaphore to become available before suspending a request.
- *
- * @param value wait time (in milliseconds)
- */
- public void setWaitMs(long value)
- {
- _waitMs = value;
- }
-
- /**
- * Get the amount of time (in milliseconds) that the filter would suspend
- * a request for while waiting for the semaphore to become available.
- *
- * @return suspend time (in milliseconds)
- */
- @ManagedAttribute("amount of time filter will suspend a request for while waiting for the semaphore to become available (in ms)")
- public long getSuspendMs()
- {
- return _suspendMs;
- }
-
- /**
- * Set the amount of time (in milliseconds) that the filter would suspend
- * a request for while waiting for the semaphore to become available.
- *
- * @param value suspend time (in milliseconds)
- */
- public void setSuspendMs(long value)
- {
- _suspendMs = value;
- }
-
- /**
- * Get the maximum number of requests allowed to be processed
- * at the same time.
- *
- * @return maximum number of requests
- */
- @ManagedAttribute("maximum number of requests to allow processing of at the same time")
- public int getMaxRequests()
- {
- return _maxRequests;
- }
-
- /**
- * Set the maximum number of requests allowed to be processed
- * at the same time.
- *
- * @param value the number of requests
- */
- public void setMaxRequests(int value)
- {
- _passes = new Semaphore((value - getMaxRequests() + _passes.availablePermits()), true);
- _maxRequests = value;
- }
-
- private class QoSAsyncListener implements AsyncListener
- {
- private final int priority;
-
- public QoSAsyncListener(int priority)
- {
- this.priority = priority;
- }
-
- @Override
- public void onStartAsync(AsyncEvent event) throws IOException
- {
- }
-
- @Override
- public void onComplete(AsyncEvent event) throws IOException
- {
- }
-
- @Override
- public void onTimeout(AsyncEvent event) throws IOException
- {
- // Remove before it's redispatched, so it won't be
- // redispatched again at the end of the filtering.
- AsyncContext asyncContext = event.getAsyncContext();
- _queues[priority].remove(asyncContext);
- ((HttpServletResponse)event.getSuppliedResponse()).sendError(HttpServletResponse.SC_SERVICE_UNAVAILABLE);
- asyncContext.complete();
- }
-
- @Override
- public void onError(AsyncEvent event) throws IOException
- {
- }
- }
-}
diff --git a/test-proxy/src/main/java/servlets/WelcomeFilter.java b/test-proxy/src/main/java/servlets/WelcomeFilter.java
deleted file mode 100644
index 03f325b..0000000
--- a/test-proxy/src/main/java/servlets/WelcomeFilter.java
+++ /dev/null
@@ -1,69 +0,0 @@
-//
-// ========================================================================
-// Copyright (c) 1995-2020 Mort Bay Consulting Pty Ltd and others.
-//
-// This program and the accompanying materials are made available under
-// the terms of the Eclipse Public License 2.0 which is available at
-// https://www.eclipse.org/legal/epl-2.0
-//
-// This Source Code may also be made available under the following
-// Secondary Licenses when the conditions for such availability set
-// forth in the Eclipse Public License, v. 2.0 are satisfied:
-// the Apache License v2.0 which is available at
-// https://www.apache.org/licenses/LICENSE-2.0
-//
-// SPDX-License-Identifier: EPL-2.0 OR Apache-2.0
-// ========================================================================
-//
-
-package servlets;
-
-import javax.servlet.*;
-import javax.servlet.http.HttpServletRequest;
-import java.io.IOException;
-
-/**
- * Welcome Filter
- * This filter can be used to server an index file for a directory
- * when no index file actually exists (thus the web.xml mechanism does
- * not work).
- *
- * This filter will dispatch requests to a directory (URLs ending with /)
- * to the welcome URL determined by the "welcome" init parameter. So if
- * the filter "welcome" init parameter is set to "index.do" then a request
- * to "/some/directory/" will be dispatched to "/some/directory/index.do" and
- * will be handled by any servlets mapped to that URL.
- *
- * Requests to "/some/directory" will be redirected to "/some/directory/".
- */
-public class WelcomeFilter implements Filter
-{
- private String welcome;
-
- @Override
- public void init(FilterConfig filterConfig)
- {
- welcome = filterConfig.getInitParameter("welcome");
- if (welcome == null)
- welcome = "index.html";
- }
-
- @Override
- public void doFilter(ServletRequest request,
- ServletResponse response,
- FilterChain chain)
- throws IOException, ServletException
- {
- String path = ((HttpServletRequest)request).getServletPath();
- if (welcome != null && path.endsWith("/"))
- request.getRequestDispatcher(path + welcome).forward(request, response);
- else
- chain.doFilter(request, response);
- }
-
- @Override
- public void destroy()
- {
- }
-}
-
diff --git a/test-proxy/src/main/java/servlets/package-info.java b/test-proxy/src/main/java/servlets/package-info.java
deleted file mode 100644
index e9151f2..0000000
--- a/test-proxy/src/main/java/servlets/package-info.java
+++ /dev/null
@@ -1,23 +0,0 @@
-//
-// ========================================================================
-// Copyright (c) 1995-2020 Mort Bay Consulting Pty Ltd and others.
-//
-// This program and the accompanying materials are made available under
-// the terms of the Eclipse Public License 2.0 which is available at
-// https://www.eclipse.org/legal/epl-2.0
-//
-// This Source Code may also be made available under the following
-// Secondary Licenses when the conditions for such availability set
-// forth in the Eclipse Public License, v. 2.0 are satisfied:
-// the Apache License v2.0 which is available at
-// https://www.apache.org/licenses/LICENSE-2.0
-//
-// SPDX-License-Identifier: EPL-2.0 OR Apache-2.0
-// ========================================================================
-//
-
-/**
- * Jetty Servlets : Generally Useful Servlets, Handlers and Filters
- */
-package servlets;
-
diff --git a/test-proxy/src/main/webapp/WEB-INF/web.xml b/test-proxy/src/main/webapp/WEB-INF/web.xml
index 9f88c1f..dcc0494 100644
--- a/test-proxy/src/main/webapp/WEB-INF/web.xml
+++ b/test-proxy/src/main/webapp/WEB-INF/web.xml
@@ -1,7 +1,22 @@
+ "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
+ "http://java.sun.com/dtd/web-app_2_3.dtd" >
+
+Hello World!
+
+
+
+
+
+
+
+
+
+
+
+test-proxy
+