SSRFTestUtility.java 文件源码

/**
 * Query the Class type to find a WITH setter method for the indicated field.
 * <p>
 * @param type  the class type
 * @param field the field
 * @return
 * @throws ClassNotFoundException
 * @throws IllegalAccessException
 * @throws IllegalArgumentException
 * @throws InvocationTargetException
 */
private static Object getEnumEntry(Class<?> type, Field field) throws ClassNotFoundException, IllegalAccessException, IllegalArgumentException, InvocationTargetException {
  /**
   * Inspect the WITH setter to determine if the field expects an enumerated
   * input.
   */
  Method with = SSRFUtility.findWithEnumMethod(type, field);
  if (with != null) {
    for (Class<?> parameterType : with.getParameterTypes()) {
      if (parameterType.isEnum()) {
        String fieldClassName = parameterType.toString().replace("class ", "").trim();
        Class<?> fieldClass = Class.forName(fieldClassName); // throws ClassNotFoundException
        /**
         * Get a random instance of the enumerated class type.
         */
        Enum fieldInstance = (Enum) fieldClass.getEnumConstants()[new Random().nextInt(fieldClass.getEnumConstants().length)];
        /**
         * If the instance has an XmlEnumValue annotation then return the XML
         * value.
         */
        XmlEnumValue xmlEnumValue = fieldInstance.getClass().getAnnotation(XmlEnumValue.class);
        if (xmlEnumValue != null) {
          return xmlEnumValue.value();
        }
        /**
         * Otherwise try to call the value getter.
         */
        for (Method method : fieldClass.getDeclaredMethods()) {
          if (method.getName().equals("value")) {
            return method.invoke(fieldInstance);
          }
        }
        /**
         * Finally just return the numerated instance name.
         */
        return fieldInstance.name();
      }
    }
  }
  /**
   * No enumerated instance found. Return null.
   */
  return null;
}