1 |
|
|
2 |
|
|
3 |
|
|
4 |
|
|
5 |
|
|
6 |
|
|
7 |
|
|
8 |
|
|
9 |
|
|
10 |
|
|
11 |
|
|
12 |
|
|
13 |
|
|
14 |
|
|
15 |
|
|
16 |
|
|
17 |
|
|
18 |
|
|
19 |
|
|
20 |
|
package com.xpn.xwiki.web; |
21 |
|
|
22 |
|
import java.util.Enumeration; |
23 |
|
import java.util.regex.Matcher; |
24 |
|
import java.util.regex.Pattern; |
25 |
|
|
26 |
|
import org.xwiki.localization.ContextualLocalizationManager; |
27 |
|
import org.xwiki.model.reference.DocumentReference; |
28 |
|
import org.xwiki.model.reference.DocumentReferenceResolver; |
29 |
|
import org.xwiki.security.authorization.AuthorizationManager; |
30 |
|
import org.xwiki.security.authorization.Right; |
31 |
|
|
32 |
|
import com.xpn.xwiki.XWiki; |
33 |
|
import com.xpn.xwiki.XWikiContext; |
34 |
|
import com.xpn.xwiki.XWikiException; |
35 |
|
import com.xpn.xwiki.doc.XWikiDocument; |
36 |
|
import com.xpn.xwiki.objects.BaseObject; |
37 |
|
|
38 |
|
|
39 |
|
|
40 |
|
|
41 |
|
|
42 |
|
@version |
43 |
|
@since |
44 |
|
|
|
|
| 0% |
Uncovered Elements: 44 (44) |
Complexity: 10 |
Complexity Density: 0.33 |
|
45 |
|
public class CommentSaveAction extends CommentAddAction |
46 |
|
{ |
47 |
|
private static final String COMMENT_FIELD_NAME = "comment"; |
48 |
|
|
49 |
|
|
50 |
|
|
51 |
|
|
52 |
|
private DocumentReferenceResolver<String> documentReferenceResolver = |
53 |
|
Utils.getComponent(DocumentReferenceResolver.TYPE_STRING, "current"); |
54 |
|
|
55 |
|
|
56 |
|
|
57 |
|
|
58 |
|
private AuthorizationManager authorizationManager = Utils.getComponent(AuthorizationManager.class); |
59 |
|
|
60 |
|
|
61 |
|
|
62 |
|
|
63 |
|
private ContextualLocalizationManager localizationManager = Utils.getComponent(ContextualLocalizationManager.class); |
64 |
|
|
65 |
|
|
66 |
|
|
67 |
|
|
68 |
|
private final Pattern pattern = Pattern.compile("XWiki.XWikiComments_(\\d+)_comment"); |
69 |
|
|
|
|
| 0% |
Uncovered Elements: 12 (12) |
Complexity: 3 |
Complexity Density: 0.38 |
|
70 |
0 |
private int getCommentIdFromRequest(XWikiRequest request) throws XWikiException... |
71 |
|
{ |
72 |
|
|
73 |
0 |
Enumeration parameterNames = request.getParameterNames(); |
74 |
0 |
while (parameterNames.hasMoreElements()) { |
75 |
0 |
String parameterName = (String) parameterNames.nextElement(); |
76 |
|
|
77 |
0 |
Matcher m = pattern.matcher(parameterName); |
78 |
0 |
if (m.find()) { |
79 |
0 |
String number = m.group(1); |
80 |
0 |
return Integer.parseInt(number); |
81 |
|
} |
82 |
|
} |
83 |
0 |
throw new XWikiException("Failed to find the comment to save.", null); |
84 |
|
} |
85 |
|
|
|
|
| 0% |
Uncovered Elements: 30 (30) |
Complexity: 7 |
Complexity Density: 0.32 |
|
86 |
0 |
@Override... |
87 |
|
public boolean action(XWikiContext context) throws XWikiException |
88 |
|
{ |
89 |
|
|
90 |
0 |
XWiki xwiki = context.getWiki(); |
91 |
0 |
XWikiResponse response = context.getResponse(); |
92 |
0 |
XWikiRequest request = context.getRequest(); |
93 |
0 |
XWikiDocument doc = context.getDoc(); |
94 |
|
|
95 |
0 |
if (!csrfTokenCheck(context) || doc.isNew()) { |
96 |
0 |
return false; |
97 |
|
} |
98 |
|
|
99 |
|
|
100 |
0 |
DocumentReference commentClass = new DocumentReference(context.getWikiId(), XWiki.SYSTEM_SPACE, |
101 |
|
XWikiDocument.COMMENTSCLASS_REFERENCE.getName()); |
102 |
|
|
103 |
|
|
104 |
0 |
int commentId = getCommentIdFromRequest(request); |
105 |
0 |
BaseObject commentObj = doc.getXObject(commentClass, commentId); |
106 |
0 |
if (commentObj == null) { |
107 |
0 |
return false; |
108 |
|
} |
109 |
|
|
110 |
|
|
111 |
0 |
String commentAuthor = commentObj.getStringValue("author"); |
112 |
0 |
DocumentReference authorReference = documentReferenceResolver.resolve(commentAuthor); |
113 |
0 |
if (!authorReference.equals(context.getUserReference()) |
114 |
|
&& !authorizationManager.hasAccess(Right.ADMIN, context.getUserReference(), |
115 |
|
context.getDoc().getDocumentReference())) { |
116 |
0 |
return false; |
117 |
|
} |
118 |
|
|
119 |
|
|
120 |
0 |
commentObj.set(COMMENT_FIELD_NAME, request.getParameter( |
121 |
|
String.format("XWiki.XWikiComments_%d_comment", commentId)), context); |
122 |
|
|
123 |
|
|
124 |
0 |
xwiki.saveDocument(doc, localizationManager.getTranslationPlain("core.comment.editComment"), |
125 |
|
true, context); |
126 |
|
|
127 |
|
|
128 |
0 |
if (context.getRequest().get("xpage") != null) { |
129 |
0 |
return true; |
130 |
|
} |
131 |
|
|
132 |
|
|
133 |
0 |
String redirect = Utils.getRedirect("edit", context); |
134 |
0 |
sendRedirect(response, redirect); |
135 |
0 |
return false; |
136 |
|
} |
137 |
|
} |