org.mvel2.PropertyAccessException Java Examples

@Override
public Object invoke0(Map<String, Object> context) {
	context.putAll(beans);
	context.putAll(pojos);
	if (StringUtils.isNotBlank(expr) && !MvelUtils.evalToBoolean(expr, context)) {
		return null;
	}
	try {
		return MvelUtils.eval(script, context);
	} catch (PropertyAccessException e) {
		logger.error("mvel script execute error:" + e.getMessage(), e);
		Throwable sourceE = MvelUtils.unboxingException(e);
		if (sourceE instanceof RuntimeException) {
			throw (BizException) sourceE;
		} else {
			throw new UndeclaredThrowableException(sourceE);
		}
	}
}
 

@Test
public void testIgnoreConditionErrorsTrueNIFI() throws InitializationException, IOException {
    final TestRunner runner = TestRunners.newTestRunner(TestProcessor.class);
    final RulesEngineService service = new MockEasyRulesEngineService();
    runner.addControllerService("easy-rules-engine-service-test",service);
    runner.setProperty(service, EasyRulesEngineService.RULES_FILE_PATH, "src/test/resources/test_nifi_rules.json");
    runner.setProperty(service,EasyRulesEngineService.RULES_FILE_TYPE, "JSON");
    runner.setProperty(service,EasyRulesEngineService.RULES_FILE_FORMAT, "NIFI");
    runner.setProperty(service,EasyRulesEngineService.IGNORE_CONDITION_ERRORS,"true");
    runner.enableControllerService(service);
    runner.assertValid(service);
    Map<String, Object> facts = new HashMap<>();
    facts.put("fakeMetric",60);
    facts.put("predictedTimeToBytesBackpressureMillis",299999);
    try {
        List<Action> actions = service.fireRules(facts);
        assertNotNull(actions);
        assertEquals(actions.size(), 1);
    }catch (PropertyAccessException pae){
        fail();
    }
}
 

@Test
public void testIgnoreConditionErrorsTrueMVEL() throws InitializationException, IOException {
    final TestRunner runner = TestRunners.newTestRunner(TestProcessor.class);
    final RulesEngineService service = new MockEasyRulesEngineService();
    runner.addControllerService("easy-rules-engine-service-test",service);
    runner.setProperty(service, EasyRulesEngineService.RULES_FILE_PATH, "src/test/resources/test_mvel_rules.json");
    runner.setProperty(service,EasyRulesEngineService.RULES_FILE_TYPE, "JSON");
    runner.setProperty(service,EasyRulesEngineService.RULES_FILE_FORMAT, "MVEL");
    runner.setProperty(service,EasyRulesEngineService.IGNORE_CONDITION_ERRORS,"true");
    runner.enableControllerService(service);
    runner.assertValid(service);
    Map<String, Object> facts = new HashMap<>();
    facts.put("fakeMetric",60);
    facts.put("predictedTimeToBytesBackpressureMillis",299999);
    try {
        List<Action> actions = service.fireRules(facts);
        assertNotNull(actions);
        assertEquals(actions.size(), 1);
    }catch (PropertyAccessException pae){
        fail();
    }
}
 

@Test
public void testUntrustedMVELSalience() throws Exception {
    String drl = "package org.foo.bar\n" +
            "import "+MaliciousExitHelper.class.getName().replace('$', '.')+" \n" +
            "rule R1 dialect \"mvel\" salience( MaliciousExitHelper.exit() ) \n" +
            "when\n" +
            "then\n" +
            "end\n";

    try {
        KieServices ks = KieServices.Factory.get();
        KieFileSystem kfs = ks.newKieFileSystem().write(ResourceFactory.newByteArrayResource(drl.getBytes())
                .setSourcePath("org/foo/bar/r1.drl"));
        ks.newKieBuilder(kfs).buildAll();

        ReleaseId releaseId = ks.getRepository().getDefaultReleaseId();
        KieContainer kc = ks.newKieContainer(releaseId);

        KieSession ksession = kc.newKieSession();
        ksession.fireAllRules();
        fail("The security policy for the rule should have prevented this from executing...");
    } catch (PropertyAccessException e) {
        // weak way of testing but couldn't find a better way
        if( e.toString().contains( "The security policy should have prevented" ) ) {
            fail("The security policy for the rule should have prevented this from executing...");
        } else {
            // test succeeded
        }
    }
}
 

@Test
public void testUntrustedMVELEnabled() throws Exception {
    String drl = "package org.foo.bar\n" +
            "import "+MaliciousExitHelper.class.getName().replace('$', '.')+" \n" +
            "rule R1 dialect \"mvel\" enabled( MaliciousExitHelper.isEnabled() ) \n" +
            "when\n" +
            "then\n" +
            "end\n";

    try {
        KieServices ks = KieServices.Factory.get();
        KieFileSystem kfs = ks.newKieFileSystem().write(ResourceFactory.newByteArrayResource(drl.getBytes())
                .setSourcePath("org/foo/bar/r1.drl"));
        ks.newKieBuilder(kfs).buildAll();

        ReleaseId releaseId = ks.getRepository().getDefaultReleaseId();
        KieContainer kc = ks.newKieContainer(releaseId);

        KieSession ksession = kc.newKieSession();
        ksession.fireAllRules();
        fail("The security policy for the rule should have prevented this from executing...");
    } catch (PropertyAccessException e) {
        // weak way of testing but couldn't find a better way
        if( e.toString().contains( "The security policy should have prevented" ) ) {
            fail("The security policy for the rule should have prevented this from executing...");
        } else {
            // test succeeded
        }
    }
}
 

@Test
public void testReflectionAttack() throws Exception {
    String setup = "java.lang.reflect.Field field = org.drools.core.util.MVELSafeHelper.getDeclaredField(\"evaluator\");\n"
            + "System.out.println(field);\n"  
            + "field.setAccessible(true);\n"  
            + "field.set(null, \"new org.drools.core.util.MVELSafeHelper.RawMVELEvaluator()\");";
    try {
        assertEquals( SafeMVELEvaluator.class.getName(), MVELSafeHelper.getEvaluator().getClass().getName() );
        MVELSafeHelper.getEvaluator().eval(setup, new HashMap<String,Object>());
        fail("Should have raised an AccessControlException");
    } catch (PropertyAccessException e) {
        // test succeeded. the policy in place prevented the rule from executing field.setAccessible().
        //e.printStackTrace();
    }
}
 

private static MvelException processPropertyAccessException(long line, String column, PropertyAccessException e) {
    char c = e.getExpr()[e.getCursor()];

    switch(c) {
    case '\u201c':
    case '\u201d':
        return new MvelException(line, column, "Expression contains invalid double quotation mark: " + c, e);
    default:
        return new MvelException(line, column, e);
    }
}
 

public static Throwable unboxingException(Throwable ex) {
    if (ex instanceof PropertyAccessException) {
        Throwable innerEx = getCauseOver(ex);
        if (innerEx instanceof InvocationTargetException) {
            return ((InvocationTargetException)innerEx).getTargetException();
        } else {
            return innerEx;
        }
    } else {
        return ex;
    }

}
 

public static Throwable getCauseOver(Throwable pae) {
    if (pae.getCause() == null) {
        return pae;
    } else if ((pae.getCause() instanceof PropertyAccessException) && !(pae.getCause() == pae)) {
        return getCauseOver(pae.getCause());
    } else {
        return pae.getCause();
    }
}