├── README.md
├── build.xml
├── build
    └── web
    │   ├── META-INF
    │       ├── MANIFEST.MF
    │       └── context.xml
    │   ├── WEB-INF
    │       ├── applicationContext.xml
    │       ├── classes
    │       │   └── org
    │       │   │   └── cysecurity
    │       │   │       └── springdemo
    │       │   │           ├── AdminController.class
    │       │   │           ├── ErrorController.class
    │       │   │           └── HelloController.class
    │       ├── dispatcher-servlet.xml
    │       ├── glassfish-web.xml
    │       ├── jsp
    │       │   ├── Admin.jsp
    │       │   ├── Error.jsp
    │       │   └── HelloWorld.jsp
    │       ├── lib
    │       │   ├── commons-logging-1.2.jar
    │       │   ├── spring-aop-3.0.5.RELEASE.jar
    │       │   ├── spring-asm-3.0.5.RELEASE.jar
    │       │   ├── spring-beans-3.0.5.RELEASE.jar
    │       │   ├── spring-context-3.0.5.RELEASE.jar
    │       │   ├── spring-core-3.0.5.RELEASE.jar
    │       │   ├── spring-expression-3.0.5.RELEASE.jar
    │       │   ├── spring-security-taglibs-3.0.5.RELEASE.jar
    │       │   ├── spring-web-3.0.5.RELEASE.jar
    │       │   └── spring-webmvc-3.0.5.RELEASE.jar
    │       ├── messages.properties
    │       ├── messages_en.properties
    │       └── web.xml
    │   └── redirect.jsp
├── nbproject
    ├── ant-deploy.xml
    ├── build-impl.xml
    ├── genfiles.properties
    ├── private
    │   ├── private.properties
    │   ├── private.xml
    │   └── retriever
    │   │   └── catalog.xml
    ├── project.properties
    └── project.xml
├── src
    ├── conf
    │   └── MANIFEST.MF
    └── java
    │   └── org
    │       └── cysecurity
    │           └── springdemo
    │               ├── AdminController.java
    │               ├── ErrorController.java
    │               └── HelloController.java
└── web
    ├── META-INF
        └── context.xml
    ├── WEB-INF
        ├── applicationContext.xml
        ├── dispatcher-servlet.xml
        ├── glassfish-web.xml
        ├── jsp
        │   ├── Admin.jsp
        │   ├── Error.jsp
        │   └── HelloWorld.jsp
        ├── messages.properties
        ├── messages_en.properties
        └── web.xml
    └── redirect.jsp


/README.md:
--------------------------------------------------------------------------------
1 | # VulnerableSpring
2 | Vulnerable Java based Web Application
3 | 
4 | This is part of Java Vulnerable Lab :
5 | https://github.com/CSPF-Founder/JavaVulnerableLab/
6 | 


--------------------------------------------------------------------------------
/build.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <!-- You may freely edit this file. See commented blocks below for -->
 3 | <!-- some examples of how to customize the build. -->
 4 | <!-- (If you delete it and reopen the project it will be recreated.) -->
 5 | <!-- By default, only the Clean and Build commands use this build script. -->
 6 | <!-- Commands such as Run, Debug, and Test only use this build script if -->
 7 | <!-- the Compile on Save feature is turned off for the project. -->
 8 | <!-- You can turn off the Compile on Save (or Deploy on Save) setting -->
 9 | <!-- in the project's Project Properties dialog box.-->
10 | <project name="VulnerableSpring" default="default" basedir=".">
11 |     <description>Builds, tests, and runs the project VulnerableSpring.</description>
12 |     <import file="nbproject/build-impl.xml"/>
13 |     <!--
14 | 
15 |     There exist several targets which are by default empty and which can be 
16 |     used for execution of your tasks. These targets are usually executed 
17 |     before and after some main targets. They are: 
18 | 
19 |       -pre-init:                 called before initialization of project properties 
20 |       -post-init:                called after initialization of project properties 
21 |       -pre-compile:              called before javac compilation 
22 |       -post-compile:             called after javac compilation 
23 |       -pre-compile-single:       called before javac compilation of single file
24 |       -post-compile-single:      called after javac compilation of single file
25 |       -pre-compile-test:         called before javac compilation of JUnit tests
26 |       -post-compile-test:        called after javac compilation of JUnit tests
27 |       -pre-compile-test-single:  called before javac compilation of single JUnit test
28 |       -post-compile-test-single: called after javac compilation of single JUunit test
29 |       -pre-dist:                 called before archive building 
30 |       -post-dist:                called after archive building 
31 |       -post-clean:               called after cleaning build products 
32 |       -pre-run-deploy:           called before deploying
33 |       -post-run-deploy:          called after deploying
34 | 
35 |     Example of pluging an obfuscator after the compilation could look like 
36 | 
37 |         <target name="-post-compile">
38 |             <obfuscate>
39 |                 <fileset dir="${build.classes.dir}"/>
40 |             </obfuscate>
41 |         </target>
42 | 
43 |     For list of available properties check the imported 
44 |     nbproject/build-impl.xml file. 
45 | 
46 | 
47 |     Other way how to customize the build is by overriding existing main targets.
48 |     The target of interest are: 
49 | 
50 |       init-macrodef-javac:    defines macro for javac compilation
51 |       init-macrodef-junit:   defines macro for junit execution
52 |       init-macrodef-debug:    defines macro for class debugging
53 |       do-dist:                archive building
54 |       run:                    execution of project 
55 |       javadoc-build:          javadoc generation 
56 | 
57 |     Example of overriding the target for project execution could look like 
58 | 
59 |         <target name="run" depends="<PROJNAME>-impl.jar">
60 |             <exec dir="bin" executable="launcher.exe">
61 |                 <arg file="${dist.jar}"/>
62 |             </exec>
63 |         </target>
64 | 
65 |     Notice that overridden target depends on jar target and not only on 
66 |     compile target as regular run target does. Again, for list of available 
67 |     properties which you can use check the target you are overriding in 
68 |     nbproject/build-impl.xml file. 
69 | 
70 |     -->
71 | </project>
72 | 


--------------------------------------------------------------------------------
/build/web/META-INF/MANIFEST.MF:
--------------------------------------------------------------------------------
1 | Manifest-Version: 1.0
2 | 
3 | 


--------------------------------------------------------------------------------
/build/web/META-INF/context.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <Context antiJARLocking="true" path="/VulnerableSpring"/>
3 | 


--------------------------------------------------------------------------------
/build/web/WEB-INF/applicationContext.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <beans xmlns="http://www.springframework.org/schema/beans"
 3 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |        xmlns:p="http://www.springframework.org/schema/p"
 5 |        xmlns:aop="http://www.springframework.org/schema/aop"
 6 |        xmlns:tx="http://www.springframework.org/schema/tx"
 7 |        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
 8 |        http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd
 9 |        http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.0.xsd">
10 |     
11 |     <!--bean id="propertyConfigurer"
12 |           class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer"
13 |           p:location="/WEB-INF/jdbc.properties" />
14 |     
15 |     <bean id="dataSource"
16 |           class="org.springframework.jdbc.datasource.DriverManagerDataSource"
17 |           p:driverClassName="${jdbc.driverClassName}"
18 |           p:url="${jdbc.url}"
19 |           p:username="${jdbc.username}"
20 |           p:password="${jdbc.password}" /-->
21 |     
22 |     <!-- ADD PERSISTENCE SUPPORT HERE (jpa, hibernate, etc) -->
23 |     
24 | </beans>
25 | 


--------------------------------------------------------------------------------
/build/web/WEB-INF/classes/org/cysecurity/springdemo/AdminController.class:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/classes/org/cysecurity/springdemo/AdminController.class


--------------------------------------------------------------------------------
/build/web/WEB-INF/classes/org/cysecurity/springdemo/ErrorController.class:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/classes/org/cysecurity/springdemo/ErrorController.class


--------------------------------------------------------------------------------
/build/web/WEB-INF/classes/org/cysecurity/springdemo/HelloController.class:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/classes/org/cysecurity/springdemo/HelloController.class


--------------------------------------------------------------------------------
/build/web/WEB-INF/dispatcher-servlet.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <beans xmlns="http://www.springframework.org/schema/beans"
 3 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |        xmlns:p="http://www.springframework.org/schema/p"
 5 |        xmlns:aop="http://www.springframework.org/schema/aop"
 6 |        xmlns:tx="http://www.springframework.org/schema/tx"
 7 |        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
 8 |        http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd
 9 | http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.0.xsd">
10 | 
11 |         <bean id="localeResolver"
12 | 		class="org.springframework.web.servlet.i18n.SessionLocaleResolver">
13 | 		<property name="defaultLocale" value="en" />
14 | 	</bean>
15 |         
16 |    	<bean id="localeChangeInterceptor"
17 | 		class="org.springframework.web.servlet.i18n.LocaleChangeInterceptor">
18 | 		<property name="paramName" value="language" />
19 | 	</bean>
20 | 
21 | 	<bean class="org.springframework.web.servlet.mvc.support.ControllerClassNameHandlerMapping" >
22 | 		<property name="interceptors">
23 | 		   <list>
24 | 			<ref bean="localeChangeInterceptor" />
25 | 		    </list>
26 | 		</property>
27 | 	</bean>
28 |     <!--
29 |     Most controllers will use the ControllerClassNameHandlerMapping above, but
30 |     for the index controller we are using ParameterizableViewController, so we must
31 |     define an explicit mapping for it.
32 |     -->
33 |     <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
34 |         <property name="mappings">
35 |             <props>
36 |                 <prop key="index.htm">indexController</prop>
37 |             </props>
38 |         </property>
39 |     </bean>
40 | 
41 |     	<bean class="org.cysecurity.springdemo.HelloController" />
42 |         <bean class="org.cysecurity.springdemo.AdminController" />      
43 |         <bean class="org.cysecurity.springdemo.ErrorController" />
44 |       
45 | 	<bean id="messageSource" class="org.springframework.context.support.ReloadableResourceBundleMessageSource">
46 |     <property name="basename" value="/WEB-INF/messages" />
47 | </bean>
48 |  
49 | 
50 |     <bean id="viewResolver"
51 |           class="org.springframework.web.servlet.view.InternalResourceViewResolver"
52 |           p:prefix="/WEB-INF/jsp/"
53 |           p:suffix=".jsp" /> 
54 |     
55 |     <!--
56 |     The index controller.
57 |     -->
58 |     <bean name="indexController"
59 |           class="org.springframework.web.servlet.mvc.ParameterizableViewController"
60 |           p:viewName="index" />
61 |     
62 | </beans>
63 | 


--------------------------------------------------------------------------------
/build/web/WEB-INF/glassfish-web.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <!DOCTYPE glassfish-web-app PUBLIC "-//GlassFish.org//DTD GlassFish Application Server 3.1 Servlet 3.0//EN" "http://glassfish.org/dtds/glassfish-web-app_3_0-1.dtd">
 3 | <glassfish-web-app error-url="">
 4 |   <class-loader delegate="true"/>
 5 |   <jsp-config>
 6 |     <property name="keepgenerated" value="true">
 7 |       <description>Keep a copy of the generated servlet class' java code.</description>
 8 |     </property>
 9 |   </jsp-config>
10 | </glassfish-web-app>
11 | 


--------------------------------------------------------------------------------
/build/web/WEB-INF/jsp/Admin.jsp:
--------------------------------------------------------------------------------
 1 | <%-- 
 2 |     Document   : admin
 3 |     Created on : 28 Dec, 2014, 7:51:18 PM
 4 |     Author     : breakthesec
 5 | --%>
 6 | <%
 7 |      if(session.getAttribute("privilege")!=null && session.getAttribute("privilege").equals("admin"))
 8 |    {    
 9 |      %>
10 | <%@page contentType="text/html" pageEncoding="UTF-8"%>
11 | <!DOCTYPE html>
12 | <html>
13 |     <head>
14 |         <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
15 |         <title>JSP Page</title>
16 |     </head>
17 |     <body>
18 |         <h1>Welcome to Admin Panel</h1>
19 |     </body>
20 | </html>
21 | <% 
22 |        
23 |    } else
24 |      {
25 |          response.sendRedirect("error.htm?msg=error.c403");
26 |      }
27 |      %>


--------------------------------------------------------------------------------
/build/web/WEB-INF/jsp/Error.jsp:
--------------------------------------------------------------------------------
 1 | <%@ page contentType="text/html;charset=UTF-8" %>
 2 | <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
 3 | <html>
 4 | <body>
 5 | <h1 style="color:red">Error Page :</h1>
 6 | 
 7 | <% 
 8 | 
 9 | out.print("<br/>");
10 | out.print("Hello "+session.getAttribute("privilege"));
11 | 
12 | %>
13 | 
14 | <h3>
15 | <spring:message code="${param.msg}" />
16 | </h3>
17 | 
18 | 
19 | </body>
20 | </html>


--------------------------------------------------------------------------------
/build/web/WEB-INF/jsp/HelloWorld.jsp:
--------------------------------------------------------------------------------
 1 | <%@ page contentType="text/html;charset=UTF-8" %>
 2 | <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
 3 | <html>
 4 | <body>
 5 | <h1>Spring Demo</h1>
 6 | <% 
 7 | if(session.getAttribute("privilege")==null)
 8 | {
 9 | session.setAttribute("privilege","user");
10 | }
11 | %>
12 | <a href="admin.htm">Go to Admin Panel</a>
13 | 
14 | 
15 | </body>
16 | </html>


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/commons-logging-1.2.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/commons-logging-1.2.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-aop-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-aop-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-asm-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-asm-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-beans-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-beans-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-context-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-context-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-core-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-core-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-expression-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-expression-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-security-taglibs-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-security-taglibs-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-web-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-web-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/lib/spring-webmvc-3.0.5.RELEASE.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/build/web/WEB-INF/lib/spring-webmvc-3.0.5.RELEASE.jar


--------------------------------------------------------------------------------
/build/web/WEB-INF/messages.properties:
--------------------------------------------------------------------------------
1 | welcome.springmvc=Welcome to Spring Demo Page
2 | error.c403=You are not allowed to Access this page


--------------------------------------------------------------------------------
/build/web/WEB-INF/messages_en.properties:
--------------------------------------------------------------------------------
1 | welcome.springmvc=Welcome to Spring Demo Page
2 | error.c403=You are not allowed to Access this page


--------------------------------------------------------------------------------
/build/web/WEB-INF/web.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
 3 |     <context-param>
 4 |         <param-name>contextConfigLocation</param-name>
 5 |         <param-value>/WEB-INF/applicationContext.xml</param-value>
 6 |     </context-param>
 7 |     <listener>
 8 |         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
 9 |     </listener>
10 |     <servlet>
11 |         <servlet-name>dispatcher</servlet-name>
12 |         <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
13 |         <load-on-startup>2</load-on-startup>
14 |     </servlet>
15 |     <servlet-mapping>
16 |         <servlet-name>dispatcher</servlet-name>
17 |         <url-pattern>*.htm</url-pattern>
18 |     </servlet-mapping>
19 |     <session-config>
20 |         <session-timeout>
21 |             30
22 |         </session-timeout>
23 |     </session-config>
24 |     <welcome-file-list>
25 |         <welcome-file>redirect.jsp</welcome-file>
26 |         </welcome-file-list>
27 |     </web-app>
28 | 


--------------------------------------------------------------------------------
/build/web/redirect.jsp:
--------------------------------------------------------------------------------
 1 | <%--
 2 | Views should be stored under the WEB-INF folder so that
 3 | they are not accessible except through controller process.
 4 | 
 5 | This JSP is here to provide a redirect to the dispatcher
 6 | servlet but should be the only JSP outside of WEB-INF.
 7 | --%>
 8 | <%@page contentType="text/html" pageEncoding="UTF-8"%>
 9 | <% 
10 |         response.sendRedirect("helloworld.htm");
11 | %>
12 | 


--------------------------------------------------------------------------------
/nbproject/ant-deploy.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <project default="-deploy-ant" basedir=".">
  3 |     <target name="-init-cl-deployment-env" if="deploy.ant.enabled">
  4 |         <property file="${deploy.ant.properties.file}" />
  5 |         <available file="${deploy.ant.docbase.dir}/WEB-INF/sun-web.xml" property="sun.web.present"/>
  6 |         <available file="${deploy.ant.docbase.dir}/WEB-INF/glassfish-web.xml" property="glassfish.web.present"/>
  7 |         <available file="${deploy.ant.resource.dir}" property="has.setup"/>
  8 |         <tempfile prefix="gfv3" property="gfv3.password.file" destdir="${java.io.tmpdir}"/>  <!-- do not forget to delete this! -->
  9 |         <echo message="AS_ADMIN_PASSWORD=${gfv3.password}" file="${gfv3.password.file}"/>
 10 |     </target>
 11 |     
 12 |     <target name="-parse-sun-web" depends="-init-cl-deployment-env" if="sun.web.present">
 13 |         <tempfile prefix="gfv3" property="temp.sun.web" destdir="${java.io.tmpdir}"/>
 14 |         <copy file="${deploy.ant.docbase.dir}/WEB-INF/sun-web.xml" tofile="${temp.sun.web}"/>
 15 |         <!-- The doctype triggers resolution which can fail -->
 16 |         <replace file="${temp.sun.web}">
 17 |             <replacetoken><![CDATA[<!DOCTYPE]]></replacetoken>
 18 |             <replacevalue><![CDATA[<!-- <!DOCTYPE]]></replacevalue>
 19 |         </replace>
 20 |         <replace file="${temp.sun.web}">
 21 |             <replacetoken><![CDATA[<sun-web-app]]></replacetoken>
 22 |             <replacevalue><![CDATA[--> <sun-web-app]]></replacevalue>
 23 |         </replace>
 24 |         <xmlproperty file="${temp.sun.web}" validate="false">
 25 |         </xmlproperty>    
 26 |         <delete file="${temp.sun.web}"/>
 27 |         <condition property="deploy.ant.client.url" value="${gfv3.url}${sun-web-app.context-root}" else="${gfv3.url}/${ant.project.name}">
 28 |             <isset property="sun-web-app.context-root"/>
 29 |         </condition>
 30 |         <condition property="deploy.context.root.argument" value="&amp;contextroot=${sun-web-app.context-root}" else="/${ant.project.name}">
 31 |             <isset property="sun-web-app.context-root"/>
 32 |         </condition>
 33 |     </target>
 34 |     <target name="-parse-glassfish-web" depends="-init-cl-deployment-env" if="glassfish.web.present">
 35 |         <tempfile prefix="gfv3" property="temp.gf.web" destdir="${java.io.tmpdir}"/>
 36 |         <copy file="${deploy.ant.docbase.dir}/WEB-INF/glassfish-web.xml" tofile="${temp.gf.web}"/>
 37 |         <!-- The doctype triggers resolution which can fail -->
 38 |         <replace file="${temp.gf.web}">
 39 |             <replacetoken><![CDATA[<!DOCTYPE]]></replacetoken>
 40 |             <replacevalue><![CDATA[<!-- <!DOCTYPE]]></replacevalue>
 41 |         </replace>
 42 |         <replace file="${temp.gf.web}">
 43 |             <replacetoken><![CDATA[<glassfish-web-app]]></replacetoken>
 44 |             <replacevalue><![CDATA[--> <glassfish-web-app]]></replacevalue>
 45 |         </replace>
 46 |         <xmlproperty file="${temp.gf.web}" validate="false">
 47 |         </xmlproperty>
 48 |         <delete file="${temp.gf.web}"/>
 49 |         <condition property="deploy.ant.client.url" value="${gfv3.url}${glassfish-web-app.context-root}" else="${gfv3.url}/${ant.project.name}">
 50 |             <isset property="glassfish-web-app.context-root"/>
 51 |         </condition>
 52 |         <condition property="deploy.context.root.argument" value="&amp;contextroot=${glassfish-web-app.context-root}" else="/${ant.project.name}">
 53 |             <isset property="glassfish-web-app.context-root"/>
 54 |         </condition>
 55 |     </target>
 56 |     <target name="-no-parse-sun-web" depends="-init-cl-deployment-env" unless="sun.web.present">
 57 |         <property name="deploy.context.root.argument" value=""/>
 58 |     </target>
 59 |     <target name="-add-resources" depends="-init-cl-deployment-env" if="has.setup">
 60 |         <tempfile prefix="gfv3" property="gfv3.resources.dir" destdir="${java.io.tmpdir}"/>
 61 |         <mkdir dir="${gfv3.resources.dir}"/>
 62 |         <mkdir dir="${gfv3.resources.dir}/META-INF"/>
 63 |         <copy todir="${gfv3.resources.dir}/META-INF">
 64 |             <fileset dir="${deploy.ant.resource.dir}"/>
 65 |         </copy>
 66 |         <jar destfile="${deploy.ant.archive}" update="true">
 67 |             <fileset dir="${gfv3.resources.dir}"/>
 68 |         </jar>
 69 |         <delete dir="${gfv3.resources.dir}"/>
 70 |     </target>
 71 |     <target name="-deploy-ant" depends="-parse-glassfish-web, -parse-sun-web, -no-parse-sun-web,-add-resources" if="deploy.ant.enabled">
 72 |         <antcall target="-deploy-without-pw"/>
 73 |         <antcall target="-deploy-with-pw"/>
 74 |     </target>
 75 | 
 76 |     <target name="-deploy-without-pw" unless="gfv3.password">
 77 |         <echo message="Deploying ${deploy.ant.archive}"/>
 78 |         <tempfile prefix="gfv3" property="gfv3.results.file" destdir="${java.io.tmpdir}"/>  <!-- do not forget to delete this! -->
 79 |         <property name="full.deploy.ant.archive" location="${deploy.ant.archive}"/>
 80 |         <get src="${gfv3.admin.url}/__asadmin/deploy?path=${full.deploy.ant.archive}${deploy.context.root.argument}&amp;force=true&amp;name=${ant.project.name}"
 81 |             dest="${gfv3.results.file}"/>
 82 |         <delete file="${gfv3.results.file}"/>    
 83 |     </target>
 84 |     <target name="-deploy-with-pw" if="gfv3.password">
 85 |         <echo message="Deploying ${deploy.ant.archive}"/>
 86 |         <tempfile prefix="gfv3" property="gfv3.results.file" destdir="${java.io.tmpdir}"/>  <!-- do not forget to delete this! -->
 87 |         <property name="full.deploy.ant.archive" location="${deploy.ant.archive}"/>
 88 |         <get username="${gfv3.username}" password="${gfv3.password}" src="${gfv3.admin.url}/__asadmin/deploy?path=${full.deploy.ant.archive}${deploy.context.root.argument}&amp;force=true&amp;name=${ant.project.name}"
 89 |             dest="${gfv3.results.file}"/>
 90 |         <delete file="${gfv3.results.file}"/>
 91 |     </target>
 92 |     <target name="-undeploy-ant" depends="-init-cl-deployment-env" if="deploy.ant.enabled">
 93 |         <antcall target="-undeploy-without-pw"/>
 94 |         <antcall target="-undeploy-with-pw"/>
 95 |     </target>
 96 | 
 97 |     <target name="-undeploy-without-pw" unless="gfv3.password">
 98 |         <echo message="Undeploying ${deploy.ant.archive}"/>
 99 |         <tempfile prefix="gfv3" property="gfv3.results.file" destdir="${java.io.tmpdir}"/>  <!-- do not forget to delete this! -->
100 |         <get src="${gfv3.admin.url}/__asadmin/undeploy?name=${ant.project.name}"
101 |             dest="${gfv3.results.file}"/>
102 |         <delete file="${gfv3.results.file}"/>    
103 |     </target>
104 |     <target name="-undeploy-with-pw" if="gfv3.password">
105 |         <echo message="Undeploying ${deploy.ant.archive}"/>
106 |         <tempfile prefix="gfv3" property="gfv3.results.file" destdir="${java.io.tmpdir}"/>  <!-- do not forget to delete this! -->
107 |         <get username="${gfv3.username}" password="${gfv3.password}" src="${gfv3.admin.url}/__asadmin/undeploy?name=${ant.project.name}"
108 |             dest="${gfv3.results.file}"/>
109 |         <delete file="${gfv3.results.file}"/>
110 |     </target>
111 | </project>
112 | 


--------------------------------------------------------------------------------
/nbproject/build-impl.xml:
--------------------------------------------------------------------------------
   1 | <?xml version="1.0" encoding="UTF-8"?>
   2 | <!--
   3 |         *** GENERATED FROM project.xml - DO NOT EDIT  ***
   4 |         ***         EDIT ../build.xml INSTEAD         ***
   5 | 
   6 |         For the purpose of easier reading the script
   7 |         is divided into following sections:
   8 |         - initialization
   9 |         - compilation
  10 |         - dist
  11 |         - execution
  12 |         - debugging
  13 |         - javadoc
  14 |         - test compilation
  15 |         - test execution
  16 |         - test debugging
  17 |         - cleanup
  18 | 
  19 |         -->
  20 | <project xmlns:webproject1="http://www.netbeans.org/ns/web-project/1" xmlns:webproject2="http://www.netbeans.org/ns/web-project/2" xmlns:webproject3="http://www.netbeans.org/ns/web-project/3" basedir=".." default="default" name="VulnerableSpring-impl">
  21 |     <import file="ant-deploy.xml"/>
  22 |     <fail message="Please build using Ant 1.7.1 or higher.">
  23 |         <condition>
  24 |             <not>
  25 |                 <antversion atleast="1.7.1"/>
  26 |             </not>
  27 |         </condition>
  28 |     </fail>
  29 |     <target depends="dist,javadoc" description="Build whole project." name="default"/>
  30 |     <!--
  31 |                 INITIALIZATION SECTION
  32 |             -->
  33 |     <target name="-pre-init">
  34 |         <!-- Empty placeholder for easier customization. -->
  35 |         <!-- You can override this target in the ../build.xml file. -->
  36 |     </target>
  37 |     <target depends="-pre-init" name="-init-private">
  38 |         <property file="nbproject/private/private.properties"/>
  39 |     </target>
  40 |     <target depends="-pre-init,-init-private" name="-init-user">
  41 |         <property file="${user.properties.file}"/>
  42 |         <!-- The two properties below are usually overridden -->
  43 |         <!-- by the active platform. Just a fallback. -->
  44 |         <property name="default.javac.source" value="1.4"/>
  45 |         <property name="default.javac.target" value="1.4"/>
  46 |     </target>
  47 |     <target depends="-pre-init,-init-private,-init-user" name="-init-project">
  48 |         <property file="nbproject/project.properties"/>
  49 |     </target>
  50 |     <target depends="-pre-init,-init-private,-init-user,-init-project,-init-macrodef-property" if="dist.ear.dir" name="-do-ear-init"/>
  51 |     <target depends="-pre-init,-init-private,-init-user,-init-project,-init-macrodef-property" name="-do-init">
  52 |         <condition property="have.tests">
  53 |             <or>
  54 |                 <available file="${test.src.dir}"/>
  55 |             </or>
  56 |         </condition>
  57 |         <condition property="have.sources">
  58 |             <or>
  59 |                 <available file="${src.dir}"/>
  60 |             </or>
  61 |         </condition>
  62 |         <condition property="netbeans.home+have.tests">
  63 |             <and>
  64 |                 <isset property="netbeans.home"/>
  65 |                 <isset property="have.tests"/>
  66 |             </and>
  67 |         </condition>
  68 |         <condition property="no.javadoc.preview">
  69 |             <isfalse value="${javadoc.preview}"/>
  70 |         </condition>
  71 |         <property name="javac.compilerargs" value=""/>
  72 |         <condition property="no.deps">
  73 |             <and>
  74 |                 <istrue value="${no.dependencies}"/>
  75 |             </and>
  76 |         </condition>
  77 |         <condition property="no.dist.ear.dir">
  78 |             <not>
  79 |                 <isset property="dist.ear.dir"/>
  80 |             </not>
  81 |         </condition>
  82 |         <property name="build.web.excludes" value="${build.classes.excludes}"/>
  83 |         <condition property="do.compile.jsps">
  84 |             <istrue value="${compile.jsps}"/>
  85 |         </condition>
  86 |         <condition property="do.debug.server">
  87 |             <or>
  88 |                 <not>
  89 |                     <isset property="debug.server"/>
  90 |                 </not>
  91 |                 <istrue value="${debug.server}"/>
  92 |                 <and>
  93 |                     <not>
  94 |                         <istrue value="${debug.server}"/>
  95 |                     </not>
  96 |                     <not>
  97 |                         <istrue value="${debug.client}"/>
  98 |                     </not>
  99 |                 </and>
 100 |             </or>
 101 |         </condition>
 102 |         <condition property="do.debug.client">
 103 |             <istrue value="${debug.client}"/>
 104 |         </condition>
 105 |         <condition property="do.display.browser">
 106 |             <istrue value="${display.browser}"/>
 107 |         </condition>
 108 |         <condition property="do.display.browser.debug.old">
 109 |             <and>
 110 |                 <isset property="do.display.browser"/>
 111 |                 <not>
 112 |                     <isset property="do.debug.client"/>
 113 |                 </not>
 114 |                 <not>
 115 |                     <isset property="browser.context"/>
 116 |                 </not>
 117 |             </and>
 118 |         </condition>
 119 |         <condition property="do.display.browser.debug">
 120 |             <and>
 121 |                 <isset property="do.display.browser"/>
 122 |                 <not>
 123 |                     <isset property="do.debug.client"/>
 124 |                 </not>
 125 |                 <isset property="browser.context"/>
 126 |             </and>
 127 |         </condition>
 128 |         <available file="${conf.dir}/MANIFEST.MF" property="has.custom.manifest"/>
 129 |         <available file="${persistence.xml.dir}/persistence.xml" property="has.persistence.xml"/>
 130 |         <condition property="do.war.package.with.custom.manifest">
 131 |             <isset property="has.custom.manifest"/>
 132 |         </condition>
 133 |         <condition property="do.war.package.without.custom.manifest">
 134 |             <not>
 135 |                 <isset property="has.custom.manifest"/>
 136 |             </not>
 137 |         </condition>
 138 |         <condition property="do.tmp.war.package.with.custom.manifest">
 139 |             <and>
 140 |                 <isset property="has.custom.manifest"/>
 141 |                 <or>
 142 |                     <isfalse value="${directory.deployment.supported}"/>
 143 |                     <isset property="dist.ear.dir"/>
 144 |                 </or>
 145 |             </and>
 146 |         </condition>
 147 |         <condition property="do.tmp.war.package.without.custom.manifest">
 148 |             <and>
 149 |                 <not>
 150 |                     <isset property="has.custom.manifest"/>
 151 |                 </not>
 152 |                 <or>
 153 |                     <isfalse value="${directory.deployment.supported}"/>
 154 |                     <isset property="dist.ear.dir"/>
 155 |                 </or>
 156 |             </and>
 157 |         </condition>
 158 |         <condition property="do.tmp.war.package">
 159 |             <or>
 160 |                 <isfalse value="${directory.deployment.supported}"/>
 161 |                 <isset property="dist.ear.dir"/>
 162 |             </or>
 163 |         </condition>
 164 |         <property name="build.meta.inf.dir" value="${build.web.dir}/META-INF"/>
 165 |         <condition else="" property="application.args.param" value="${application.args}">
 166 |             <and>
 167 |                 <isset property="application.args"/>
 168 |                 <not>
 169 |                     <equals arg1="${application.args}" arg2="" trim="true"/>
 170 |                 </not>
 171 |             </and>
 172 |         </condition>
 173 |         <property name="source.encoding" value="${file.encoding}"/>
 174 |         <condition property="javadoc.encoding.used" value="${javadoc.encoding}">
 175 |             <and>
 176 |                 <isset property="javadoc.encoding"/>
 177 |                 <not>
 178 |                     <equals arg1="${javadoc.encoding}" arg2=""/>
 179 |                 </not>
 180 |             </and>
 181 |         </condition>
 182 |         <property name="javadoc.encoding.used" value="${source.encoding}"/>
 183 |         <property name="includes" value="**"/>
 184 |         <property name="excludes" value=""/>
 185 |         <property name="runmain.jvmargs" value=""/>
 186 |         <path id="endorsed.classpath.path" path="${endorsed.classpath}"/>
 187 |         <condition else="" property="endorsed.classpath.cmd.line.arg" value="-Xbootclasspath/p:'${toString:endorsed.classpath.path}'">
 188 |             <and>
 189 |                 <isset property="endorsed.classpath"/>
 190 |                 <length length="0" string="${endorsed.classpath}" when="greater"/>
 191 |             </and>
 192 |         </condition>
 193 |         <condition else="false" property="jdkBug6558476">
 194 |             <and>
 195 |                 <matches pattern="1\.[56]" string="${java.specification.version}"/>
 196 |                 <not>
 197 |                     <os family="unix"/>
 198 |                 </not>
 199 |             </and>
 200 |         </condition>
 201 |         <property name="javac.fork" value="${jdkBug6558476}"/>
 202 |         <condition property="junit.available">
 203 |             <or>
 204 |                 <available classname="org.junit.Test" classpath="${run.test.classpath}"/>
 205 |                 <available classname="junit.framework.Test" classpath="${run.test.classpath}"/>
 206 |             </or>
 207 |         </condition>
 208 |         <condition property="testng.available">
 209 |             <available classname="org.testng.annotations.Test" classpath="${run.test.classpath}"/>
 210 |         </condition>
 211 |         <condition property="junit+testng.available">
 212 |             <and>
 213 |                 <istrue value="${junit.available}"/>
 214 |                 <istrue value="${testng.available}"/>
 215 |             </and>
 216 |         </condition>
 217 |         <condition else="testng" property="testng.mode" value="mixed">
 218 |             <istrue value="${junit+testng.available}"/>
 219 |         </condition>
 220 |         <condition else="" property="testng.debug.mode" value="-mixed">
 221 |             <istrue value="${junit+testng.available}"/>
 222 |         </condition>
 223 |     </target>
 224 |     <target depends="init" name="-init-cos" unless="deploy.on.save">
 225 |         <condition property="deploy.on.save" value="true">
 226 |             <or>
 227 |                 <istrue value="${j2ee.deploy.on.save}"/>
 228 |                 <istrue value="${j2ee.compile.on.save}"/>
 229 |             </or>
 230 |         </condition>
 231 |     </target>
 232 |     <target name="-post-init">
 233 |         <!-- Empty placeholder for easier customization. -->
 234 |         <!-- You can override this target in the ../build.xml file. -->
 235 |     </target>
 236 |     <target depends="-pre-init,-init-private,-init-user,-init-project,-do-init" name="-init-check">
 237 |         <fail unless="src.dir">Must set src.dir</fail>
 238 |         <fail unless="test.src.dir">Must set test.src.dir</fail>
 239 |         <fail unless="build.dir">Must set build.dir</fail>
 240 |         <fail unless="build.web.dir">Must set build.web.dir</fail>
 241 |         <fail unless="build.generated.dir">Must set build.generated.dir</fail>
 242 |         <fail unless="dist.dir">Must set dist.dir</fail>
 243 |         <fail unless="build.classes.dir">Must set build.classes.dir</fail>
 244 |         <fail unless="dist.javadoc.dir">Must set dist.javadoc.dir</fail>
 245 |         <fail unless="build.test.classes.dir">Must set build.test.classes.dir</fail>
 246 |         <fail unless="build.test.results.dir">Must set build.test.results.dir</fail>
 247 |         <fail unless="build.classes.excludes">Must set build.classes.excludes</fail>
 248 |         <fail unless="dist.war">Must set dist.war</fail>
 249 |         <condition property="missing.j2ee.server.home">
 250 |             <and>
 251 |                 <matches pattern="j2ee.server.home" string="${j2ee.platform.classpath}"/>
 252 |                 <not>
 253 |                     <isset property="j2ee.server.home"/>
 254 |                 </not>
 255 |             </and>
 256 |         </condition>
 257 |         <fail if="missing.j2ee.server.home">
 258 | The Java EE server classpath is not correctly set up - server home directory is missing.
 259 | Either open the project in the IDE and assign the server or setup the server classpath manually.
 260 | For example like this:
 261 |    ant -Dj2ee.server.home=&lt;app_server_installation_directory&gt;
 262 |                 </fail>
 263 |         <fail unless="j2ee.platform.classpath">
 264 | The Java EE server classpath is not correctly set up. Your active server type is ${j2ee.server.type}.
 265 | Either open the project in the IDE and assign the server or setup the server classpath manually.
 266 | For example like this:
 267 |    ant -Duser.properties.file=&lt;path_to_property_file&gt; (where you put the property "j2ee.platform.classpath" in a .properties file)
 268 | or ant -Dj2ee.platform.classpath=&lt;server_classpath&gt; (where no properties file is used)
 269 |                 </fail>
 270 |     </target>
 271 |     <target name="-init-macrodef-property">
 272 |         <macrodef name="property" uri="http://www.netbeans.org/ns/web-project/1">
 273 |             <attribute name="name"/>
 274 |             <attribute name="value"/>
 275 |             <sequential>
 276 |                 <property name="@{name}" value="${@{value}}"/>
 277 |             </sequential>
 278 |         </macrodef>
 279 |     </target>
 280 |     <target depends="-init-ap-cmdline-properties" if="ap.supported.internal" name="-init-macrodef-javac-with-processors">
 281 |         <macrodef name="javac" uri="http://www.netbeans.org/ns/web-project/2">
 282 |             <attribute default="${src.dir}" name="srcdir"/>
 283 |             <attribute default="${build.classes.dir}" name="destdir"/>
 284 |             <attribute default="${javac.classpath}:${j2ee.platform.classpath}" name="classpath"/>
 285 |             <attribute default="${javac.processorpath}" name="processorpath"/>
 286 |             <attribute default="${build.generated.sources.dir}/ap-source-output" name="apgeneratedsrcdir"/>
 287 |             <attribute default="${includes}" name="includes"/>
 288 |             <attribute default="${excludes}" name="excludes"/>
 289 |             <attribute default="${javac.debug}" name="debug"/>
 290 |             <attribute default="${empty.dir}" name="gensrcdir"/>
 291 |             <element name="customize" optional="true"/>
 292 |             <sequential>
 293 |                 <property location="${build.dir}/empty" name="empty.dir"/>
 294 |                 <mkdir dir="${empty.dir}"/>
 295 |                 <mkdir dir="@{apgeneratedsrcdir}"/>
 296 |                 <javac debug="@{debug}" deprecation="${javac.deprecation}" destdir="@{destdir}" encoding="${source.encoding}" excludes="@{excludes}" fork="${javac.fork}" includeantruntime="false" includes="@{includes}" source="${javac.source}" srcdir="@{srcdir}" target="${javac.target}">
 297 |                     <src>
 298 |                         <dirset dir="@{gensrcdir}" erroronmissingdir="false">
 299 |                             <include name="*"/>
 300 |                         </dirset>
 301 |                     </src>
 302 |                     <classpath>
 303 |                         <path path="@{classpath}"/>
 304 |                     </classpath>
 305 |                     <compilerarg line="${endorsed.classpath.cmd.line.arg}"/>
 306 |                     <compilerarg line="${javac.compilerargs}"/>
 307 |                     <compilerarg value="-processorpath"/>
 308 |                     <compilerarg path="@{processorpath}:${empty.dir}"/>
 309 |                     <compilerarg line="${ap.processors.internal}"/>
 310 |                     <compilerarg value="-s"/>
 311 |                     <compilerarg path="@{apgeneratedsrcdir}"/>
 312 |                     <compilerarg line="${ap.proc.none.internal}"/>
 313 |                     <customize/>
 314 |                 </javac>
 315 |             </sequential>
 316 |         </macrodef>
 317 |     </target>
 318 |     <target depends="-init-ap-cmdline-properties" name="-init-macrodef-javac-without-processors" unless="ap.supported.internal">
 319 |         <macrodef name="javac" uri="http://www.netbeans.org/ns/web-project/2">
 320 |             <attribute default="${src.dir}" name="srcdir"/>
 321 |             <attribute default="${build.classes.dir}" name="destdir"/>
 322 |             <attribute default="${javac.classpath}:${j2ee.platform.classpath}" name="classpath"/>
 323 |             <attribute default="${javac.processorpath}" name="processorpath"/>
 324 |             <attribute default="${build.generated.sources.dir}/ap-source-output" name="apgeneratedsrcdir"/>
 325 |             <attribute default="${includes}" name="includes"/>
 326 |             <attribute default="${excludes}" name="excludes"/>
 327 |             <attribute default="${javac.debug}" name="debug"/>
 328 |             <attribute default="${empty.dir}" name="gensrcdir"/>
 329 |             <element name="customize" optional="true"/>
 330 |             <sequential>
 331 |                 <property location="${build.dir}/empty" name="empty.dir"/>
 332 |                 <mkdir dir="${empty.dir}"/>
 333 |                 <javac debug="@{debug}" deprecation="${javac.deprecation}" destdir="@{destdir}" encoding="${source.encoding}" excludes="@{excludes}" includeantruntime="false" includes="@{includes}" source="${javac.source}" srcdir="@{srcdir}" target="${javac.target}">
 334 |                     <src>
 335 |                         <dirset dir="@{gensrcdir}" erroronmissingdir="false">
 336 |                             <include name="*"/>
 337 |                         </dirset>
 338 |                     </src>
 339 |                     <classpath>
 340 |                         <path path="@{classpath}"/>
 341 |                     </classpath>
 342 |                     <compilerarg line="${endorsed.classpath.cmd.line.arg}"/>
 343 |                     <compilerarg line="${javac.compilerargs}"/>
 344 |                     <customize/>
 345 |                 </javac>
 346 |             </sequential>
 347 |         </macrodef>
 348 |     </target>
 349 |     <target depends="-init-macrodef-javac-with-processors,-init-macrodef-javac-without-processors" name="-init-macrodef-javac">
 350 |         <macrodef name="depend" uri="http://www.netbeans.org/ns/web-project/2">
 351 |             <attribute default="${src.dir}" name="srcdir"/>
 352 |             <attribute default="${build.classes.dir}" name="destdir"/>
 353 |             <attribute default="${javac.classpath}:${j2ee.platform.classpath}" name="classpath"/>
 354 |             <sequential>
 355 |                 <depend cache="${build.dir}/depcache" destdir="@{destdir}" excludes="${excludes}" includes="${includes}" srcdir="@{srcdir}">
 356 |                     <classpath>
 357 |                         <path path="@{classpath}"/>
 358 |                     </classpath>
 359 |                 </depend>
 360 |             </sequential>
 361 |         </macrodef>
 362 |         <macrodef name="force-recompile" uri="http://www.netbeans.org/ns/web-project/2">
 363 |             <attribute default="${build.classes.dir}" name="destdir"/>
 364 |             <sequential>
 365 |                 <fail unless="javac.includes">Must set javac.includes</fail>
 366 |                 <pathconvert pathsep="${line.separator}" property="javac.includes.binary">
 367 |                     <path>
 368 |                         <filelist dir="@{destdir}" files="${javac.includes}"/>
 369 |                     </path>
 370 |                     <globmapper from="*.java" to="*.class"/>
 371 |                 </pathconvert>
 372 |                 <tempfile deleteonexit="true" property="javac.includesfile.binary"/>
 373 |                 <echo file="${javac.includesfile.binary}" message="${javac.includes.binary}"/>
 374 |                 <delete>
 375 |                     <files includesfile="${javac.includesfile.binary}"/>
 376 |                 </delete>
 377 |                 <delete file="${javac.includesfile.binary}"/>
 378 |             </sequential>
 379 |         </macrodef>
 380 |     </target>
 381 |     <target if="${junit.available}" name="-init-macrodef-junit-init">
 382 |         <condition else="false" property="nb.junit.batch" value="true">
 383 |             <and>
 384 |                 <istrue value="${junit.available}"/>
 385 |                 <not>
 386 |                     <isset property="test.method"/>
 387 |                 </not>
 388 |             </and>
 389 |         </condition>
 390 |         <condition else="false" property="nb.junit.single" value="true">
 391 |             <and>
 392 |                 <istrue value="${junit.available}"/>
 393 |                 <isset property="test.method"/>
 394 |             </and>
 395 |         </condition>
 396 |     </target>
 397 |     <target name="-init-test-properties">
 398 |         <property name="test.binaryincludes" value="&lt;nothing&gt;"/>
 399 |         <property name="test.binarytestincludes" value=""/>
 400 |         <property name="test.binaryexcludes" value=""/>
 401 |     </target>
 402 |     <target if="${nb.junit.single}" name="-init-macrodef-junit-single" unless="${nb.junit.batch}">
 403 |         <macrodef name="junit" uri="http://www.netbeans.org/ns/web-project/2">
 404 |             <attribute default="${includes}" name="includes"/>
 405 |             <attribute default="${excludes}" name="excludes"/>
 406 |             <attribute default="**" name="testincludes"/>
 407 |             <attribute default="" name="testmethods"/>
 408 |             <element name="customize" optional="true"/>
 409 |             <sequential>
 410 |                 <junit dir="${basedir}" errorproperty="tests.failed" failureproperty="tests.failed" fork="true" showoutput="true" tempdir="${java.io.tmpdir}">
 411 |                     <test methods="@{testmethods}" name="@{testincludes}" todir="${build.test.results.dir}"/>
 412 |                     <syspropertyset>
 413 |                         <propertyref prefix="test-sys-prop."/>
 414 |                         <mapper from="test-sys-prop.*" to="*" type="glob"/>
 415 |                     </syspropertyset>
 416 |                     <formatter type="brief" usefile="false"/>
 417 |                     <formatter type="xml"/>
 418 |                     <jvmarg value="-ea"/>
 419 |                     <customize/>
 420 |                 </junit>
 421 |             </sequential>
 422 |         </macrodef>
 423 |     </target>
 424 |     <target depends="-init-test-properties" if="${nb.junit.batch}" name="-init-macrodef-junit-batch" unless="${nb.junit.single}">
 425 |         <macrodef name="junit" uri="http://www.netbeans.org/ns/web-project/2">
 426 |             <attribute default="${includes}" name="includes"/>
 427 |             <attribute default="${excludes}" name="excludes"/>
 428 |             <attribute default="**" name="testincludes"/>
 429 |             <attribute default="" name="testmethods"/>
 430 |             <element name="customize" optional="true"/>
 431 |             <sequential>
 432 |                 <property name="run.jvmargs.ide" value=""/>
 433 |                 <junit dir="${basedir}" errorproperty="tests.failed" failureproperty="tests.failed" fork="true" showoutput="true" tempdir="${build.dir}">
 434 |                     <batchtest todir="${build.test.results.dir}">
 435 |                         <fileset dir="${test.src.dir}" excludes="@{excludes},${excludes}" includes="@{includes}">
 436 |                             <filename name="@{testincludes}"/>
 437 |                         </fileset>
 438 |                         <fileset dir="${build.test.classes.dir}" excludes="@{excludes},${excludes},${test.binaryexcludes}" includes="${test.binaryincludes}">
 439 |                             <filename name="${test.binarytestincludes}"/>
 440 |                         </fileset>
 441 |                     </batchtest>
 442 |                     <syspropertyset>
 443 |                         <propertyref prefix="test-sys-prop."/>
 444 |                         <mapper from="test-sys-prop.*" to="*" type="glob"/>
 445 |                     </syspropertyset>
 446 |                     <formatter type="brief" usefile="false"/>
 447 |                     <formatter type="xml"/>
 448 |                     <jvmarg value="-ea"/>
 449 |                     <jvmarg line="${run.jvmargs.ide}"/>
 450 |                     <customize/>
 451 |                 </junit>
 452 |             </sequential>
 453 |         </macrodef>
 454 |     </target>
 455 |     <target depends="-init-macrodef-junit-init,-init-macrodef-junit-single, -init-macrodef-junit-batch" if="${junit.available}" name="-init-macrodef-junit"/>
 456 |     <target if="${testng.available}" name="-init-macrodef-testng">
 457 |         <macrodef name="testng" uri="http://www.netbeans.org/ns/web-project/2">
 458 |             <attribute default="${includes}" name="includes"/>
 459 |             <attribute default="${excludes}" name="excludes"/>
 460 |             <attribute default="**" name="testincludes"/>
 461 |             <attribute default="" name="testmethods"/>
 462 |             <element name="customize" optional="true"/>
 463 |             <sequential>
 464 |                 <condition else="" property="testng.methods.arg" value="@{testincludes}.@{testmethods}">
 465 |                     <isset property="test.method"/>
 466 |                 </condition>
 467 |                 <union id="test.set">
 468 |                     <fileset dir="${test.src.dir}" excludes="@{excludes},**/*.xml,${excludes}" includes="@{includes}">
 469 |                         <filename name="@{testincludes}"/>
 470 |                     </fileset>
 471 |                 </union>
 472 |                 <taskdef classname="org.testng.TestNGAntTask" classpath="${run.test.classpath}" name="testng"/>
 473 |                 <testng classfilesetref="test.set" failureProperty="tests.failed" listeners="org.testng.reporters.VerboseReporter" methods="${testng.methods.arg}" mode="${testng.mode}" outputdir="${build.test.results.dir}" suitename="VulnerableSpring" testname="TestNG tests" workingDir="${basedir}">
 474 |                     <xmlfileset dir="${build.test.classes.dir}" includes="@{testincludes}"/>
 475 |                     <propertyset>
 476 |                         <propertyref prefix="test-sys-prop."/>
 477 |                         <mapper from="test-sys-prop.*" to="*" type="glob"/>
 478 |                     </propertyset>
 479 |                     <customize/>
 480 |                 </testng>
 481 |             </sequential>
 482 |         </macrodef>
 483 |     </target>
 484 |     <target name="-init-macrodef-test-impl">
 485 |         <macrodef name="test-impl" uri="http://www.netbeans.org/ns/web-project/2">
 486 |             <attribute default="${includes}" name="includes"/>
 487 |             <attribute default="${excludes}" name="excludes"/>
 488 |             <attribute default="**" name="testincludes"/>
 489 |             <attribute default="" name="testmethods"/>
 490 |             <element implicit="true" name="customize" optional="true"/>
 491 |             <sequential>
 492 |                 <echo>No tests executed.</echo>
 493 |             </sequential>
 494 |         </macrodef>
 495 |     </target>
 496 |     <target depends="-init-macrodef-junit" if="${junit.available}" name="-init-macrodef-junit-impl">
 497 |         <macrodef name="test-impl" uri="http://www.netbeans.org/ns/web-project/2">
 498 |             <attribute default="${includes}" name="includes"/>
 499 |             <attribute default="${excludes}" name="excludes"/>
 500 |             <attribute default="**" name="testincludes"/>
 501 |             <attribute default="" name="testmethods"/>
 502 |             <element implicit="true" name="customize" optional="true"/>
 503 |             <sequential>
 504 |                 <webproject2:junit excludes="@{excludes}" includes="@{includes}" testincludes="@{testincludes}" testmethods="@{testmethods}">
 505 |                     <customize/>
 506 |                 </webproject2:junit>
 507 |             </sequential>
 508 |         </macrodef>
 509 |     </target>
 510 |     <target depends="-init-macrodef-testng" if="${testng.available}" name="-init-macrodef-testng-impl">
 511 |         <macrodef name="test-impl" uri="http://www.netbeans.org/ns/web-project/2">
 512 |             <attribute default="${includes}" name="includes"/>
 513 |             <attribute default="${excludes}" name="excludes"/>
 514 |             <attribute default="**" name="testincludes"/>
 515 |             <attribute default="" name="testmethods"/>
 516 |             <element implicit="true" name="customize" optional="true"/>
 517 |             <sequential>
 518 |                 <webproject2:testng excludes="@{excludes}" includes="@{includes}" testincludes="@{testincludes}" testmethods="@{testmethods}">
 519 |                     <customize/>
 520 |                 </webproject2:testng>
 521 |             </sequential>
 522 |         </macrodef>
 523 |     </target>
 524 |     <target depends="-init-macrodef-test-impl,-init-macrodef-junit-impl,-init-macrodef-testng-impl" name="-init-macrodef-test">
 525 |         <macrodef name="test" uri="http://www.netbeans.org/ns/web-project/2">
 526 |             <attribute default="${includes}" name="includes"/>
 527 |             <attribute default="${excludes}" name="excludes"/>
 528 |             <attribute default="**" name="testincludes"/>
 529 |             <attribute default="" name="testmethods"/>
 530 |             <sequential>
 531 |                 <webproject2:test-impl excludes="@{excludes}" includes="@{includes}" testincludes="@{testincludes}" testmethods="@{testmethods}">
 532 |                     <customize>
 533 |                         <classpath>
 534 |                             <path path="${run.test.classpath}:${j2ee.platform.classpath}:${j2ee.platform.embeddableejb.classpath}"/>
 535 |                         </classpath>
 536 |                         <jvmarg line="${endorsed.classpath.cmd.line.arg}"/>
 537 |                         <jvmarg line="${runmain.jvmargs}"/>
 538 |                     </customize>
 539 |                 </webproject2:test-impl>
 540 |             </sequential>
 541 |         </macrodef>
 542 |     </target>
 543 |     <target if="${junit.available}" name="-init-macrodef-junit-debug" unless="${nb.junit.batch}">
 544 |         <macrodef name="junit-debug" uri="http://www.netbeans.org/ns/web-project/2">
 545 |             <attribute default="${includes}" name="includes"/>
 546 |             <attribute default="${excludes}" name="excludes"/>
 547 |             <attribute default="**" name="testincludes"/>
 548 |             <attribute default="" name="testmethods"/>
 549 |             <element name="customize" optional="true"/>
 550 |             <sequential>
 551 |                 <junit dir="${basedir}" errorproperty="tests.failed" failureproperty="tests.failed" fork="true" showoutput="true" tempdir="${java.io.tmpdir}">
 552 |                     <test methods="@{testmethods}" name="@{testincludes}" todir="${build.test.results.dir}"/>
 553 |                     <syspropertyset>
 554 |                         <propertyref prefix="test-sys-prop."/>
 555 |                         <mapper from="test-sys-prop.*" to="*" type="glob"/>
 556 |                     </syspropertyset>
 557 |                     <formatter type="brief" usefile="false"/>
 558 |                     <formatter type="xml"/>
 559 |                     <jvmarg value="-ea"/>
 560 |                     <jvmarg line="${debug-args-line}"/>
 561 |                     <jvmarg value="-Xrunjdwp:transport=${debug-transport},address=${jpda.address}"/>
 562 |                     <customize/>
 563 |                 </junit>
 564 |             </sequential>
 565 |         </macrodef>
 566 |     </target>
 567 |     <target depends="-init-test-properties" if="${nb.junit.batch}" name="-init-macrodef-junit-debug-batch">
 568 |         <macrodef name="junit-debug" uri="http://www.netbeans.org/ns/web-project/2">
 569 |             <attribute default="${includes}" name="includes"/>
 570 |             <attribute default="${excludes}" name="excludes"/>
 571 |             <attribute default="**" name="testincludes"/>
 572 |             <attribute default="" name="testmethods"/>
 573 |             <element name="customize" optional="true"/>
 574 |             <sequential>
 575 |                 <property name="run.jvmargs.ide" value=""/>
 576 |                 <junit dir="${basedir}" errorproperty="tests.failed" failureproperty="tests.failed" fork="true" showoutput="true" tempdir="${build.dir}">
 577 |                     <batchtest todir="${build.test.results.dir}">
 578 |                         <fileset dir="${test.src.dir}" excludes="@{excludes},${excludes}" includes="@{includes}">
 579 |                             <filename name="@{testincludes}"/>
 580 |                         </fileset>
 581 |                         <fileset dir="${build.test.classes.dir}" excludes="@{excludes},${excludes},${test.binaryexcludes}" includes="${test.binaryincludes}">
 582 |                             <filename name="${test.binarytestincludes}"/>
 583 |                         </fileset>
 584 |                     </batchtest>
 585 |                     <syspropertyset>
 586 |                         <propertyref prefix="test-sys-prop."/>
 587 |                         <mapper from="test-sys-prop.*" to="*" type="glob"/>
 588 |                     </syspropertyset>
 589 |                     <formatter type="brief" usefile="false"/>
 590 |                     <formatter type="xml"/>
 591 |                     <jvmarg value="-ea"/>
 592 |                     <jvmarg line="${run.jvmargs.ide}"/>
 593 |                     <jvmarg line="${debug-args-line}"/>
 594 |                     <jvmarg value="-Xrunjdwp:transport=${debug-transport},address=${jpda.address}"/>
 595 |                     <customize/>
 596 |                 </junit>
 597 |             </sequential>
 598 |         </macrodef>
 599 |     </target>
 600 |     <target depends="-init-macrodef-junit-debug,-init-macrodef-junit-debug-batch" if="${junit.available}" name="-init-macrodef-junit-debug-impl">
 601 |         <macrodef name="test-debug-impl" uri="http://www.netbeans.org/ns/web-project/2">
 602 |             <attribute default="${includes}" name="includes"/>
 603 |             <attribute default="${excludes}" name="excludes"/>
 604 |             <attribute default="**" name="testincludes"/>
 605 |             <attribute default="" name="testmethods"/>
 606 |             <element implicit="true" name="customize" optional="true"/>
 607 |             <sequential>
 608 |                 <webproject2:junit-debug excludes="@{excludes}" includes="@{includes}" testincludes="@{testincludes}" testmethods="@{testmethods}">
 609 |                     <customize/>
 610 |                 </webproject2:junit-debug>
 611 |             </sequential>
 612 |         </macrodef>
 613 |     </target>
 614 |     <target if="${testng.available}" name="-init-macrodef-testng-debug">
 615 |         <macrodef name="testng-debug" uri="http://www.netbeans.org/ns/web-project/2">
 616 |             <attribute default="${main.class}" name="testClass"/>
 617 |             <attribute default="" name="testMethod"/>
 618 |             <element name="customize2" optional="true"/>
 619 |             <sequential>
 620 |                 <condition else="-testclass @{testClass}" property="test.class.or.method" value="-methods @{testClass}.@{testMethod}">
 621 |                     <isset property="test.method"/>
 622 |                 </condition>
 623 |                 <condition else="-suitename VulnerableSpring -testname @{testClass} ${test.class.or.method}" property="testng.cmd.args" value="@{testClass}">
 624 |                     <matches pattern=".*\.xml" string="@{testClass}"/>
 625 |                 </condition>
 626 |                 <delete dir="${build.test.results.dir}" quiet="true"/>
 627 |                 <mkdir dir="${build.test.results.dir}"/>
 628 |                 <webproject1:debug args="${testng.cmd.args}" classname="org.testng.TestNG" classpath="${debug.test.classpath}:${j2ee.platform.embeddableejb.classpath}">
 629 |                     <customize>
 630 |                         <customize2/>
 631 |                         <jvmarg value="-ea"/>
 632 |                         <arg line="${testng.debug.mode}"/>
 633 |                         <arg line="-d ${build.test.results.dir}"/>
 634 |                         <arg line="-listener org.testng.reporters.VerboseReporter"/>
 635 |                     </customize>
 636 |                 </webproject1:debug>
 637 |             </sequential>
 638 |         </macrodef>
 639 |     </target>
 640 |     <target depends="-init-macrodef-testng-debug" if="${testng.available}" name="-init-macrodef-testng-debug-impl">
 641 |         <macrodef name="testng-debug-impl" uri="http://www.netbeans.org/ns/web-project/2">
 642 |             <attribute default="${main.class}" name="testClass"/>
 643 |             <attribute default="" name="testMethod"/>
 644 |             <element implicit="true" name="customize2" optional="true"/>
 645 |             <sequential>
 646 |                 <webproject2:testng-debug testClass="@{testClass}" testMethod="@{testMethod}">
 647 |                     <customize2/>
 648 |                 </webproject2:testng-debug>
 649 |             </sequential>
 650 |         </macrodef>
 651 |     </target>
 652 |     <target depends="-init-macrodef-junit-debug-impl" if="${junit.available}" name="-init-macrodef-test-debug-junit">
 653 |         <macrodef name="test-debug" uri="http://www.netbeans.org/ns/web-project/2">
 654 |             <attribute default="${includes}" name="includes"/>
 655 |             <attribute default="${excludes}" name="excludes"/>
 656 |             <attribute default="**" name="testincludes"/>
 657 |             <attribute default="" name="testmethods"/>
 658 |             <attribute default="${main.class}" name="testClass"/>
 659 |             <attribute default="" name="testMethod"/>
 660 |             <sequential>
 661 |                 <webproject2:test-debug-impl excludes="@{excludes}" includes="@{includes}" testincludes="@{testincludes}" testmethods="@{testmethods}">
 662 |                     <customize>
 663 |                         <classpath>
 664 |                             <path path="${run.test.classpath}:${j2ee.platform.classpath}:${j2ee.platform.embeddableejb.classpath}"/>
 665 |                         </classpath>
 666 |                         <jvmarg line="${endorsed.classpath.cmd.line.arg}"/>
 667 |                         <jvmarg line="${runmain.jvmargs}"/>
 668 |                     </customize>
 669 |                 </webproject2:test-debug-impl>
 670 |             </sequential>
 671 |         </macrodef>
 672 |     </target>
 673 |     <target depends="-init-macrodef-testng-debug-impl" if="${testng.available}" name="-init-macrodef-test-debug-testng">
 674 |         <macrodef name="test-debug" uri="http://www.netbeans.org/ns/web-project/2">
 675 |             <attribute default="${includes}" name="includes"/>
 676 |             <attribute default="${excludes}" name="excludes"/>
 677 |             <attribute default="**" name="testincludes"/>
 678 |             <attribute default="" name="testmethods"/>
 679 |             <attribute default="${main.class}" name="testClass"/>
 680 |             <attribute default="" name="testMethod"/>
 681 |             <sequential>
 682 |                 <webproject2:testng-debug-impl testClass="@{testClass}" testMethod="@{testMethod}">
 683 |                     <customize2>
 684 |                         <syspropertyset>
 685 |                             <propertyref prefix="test-sys-prop."/>
 686 |                             <mapper from="test-sys-prop.*" to="*" type="glob"/>
 687 |                         </syspropertyset>
 688 |                     </customize2>
 689 |                 </webproject2:testng-debug-impl>
 690 |             </sequential>
 691 |         </macrodef>
 692 |     </target>
 693 |     <target depends="-init-macrodef-test-debug-junit,-init-macrodef-test-debug-testng" name="-init-macrodef-test-debug"/>
 694 |     <target name="-init-macrodef-java">
 695 |         <macrodef name="java" uri="http://www.netbeans.org/ns/web-project/1">
 696 |             <attribute default="${main.class}" name="classname"/>
 697 |             <attribute default="${debug.classpath}" name="classpath"/>
 698 |             <element name="customize" optional="true"/>
 699 |             <sequential>
 700 |                 <java classname="@{classname}" fork="true">
 701 |                     <jvmarg line="${endorsed.classpath.cmd.line.arg}"/>
 702 |                     <jvmarg line="${runmain.jvmargs}"/>
 703 |                     <classpath>
 704 |                         <path path="@{classpath}:${j2ee.platform.classpath}"/>
 705 |                     </classpath>
 706 |                     <syspropertyset>
 707 |                         <propertyref prefix="run-sys-prop."/>
 708 |                         <mapper from="run-sys-prop.*" to="*" type="glob"/>
 709 |                     </syspropertyset>
 710 |                     <customize/>
 711 |                 </java>
 712 |             </sequential>
 713 |         </macrodef>
 714 |     </target>
 715 |     <target name="-init-macrodef-nbjsdebug">
 716 |         <macrodef name="nbjsdebugstart" uri="http://www.netbeans.org/ns/web-project/1">
 717 |             <attribute default="${client.url}" name="webUrl"/>
 718 |             <sequential>
 719 |                 <nbjsdebugstart urlPart="${client.urlPart}" webUrl="@{webUrl}"/>
 720 |             </sequential>
 721 |         </macrodef>
 722 |     </target>
 723 |     <target depends="-init-debug-args" name="-init-macrodef-nbjpda">
 724 |         <macrodef name="nbjpdastart" uri="http://www.netbeans.org/ns/web-project/1">
 725 |             <attribute default="${main.class}" name="name"/>
 726 |             <attribute default="${debug.classpath}:${j2ee.platform.classpath}" name="classpath"/>
 727 |             <sequential>
 728 |                 <nbjpdastart addressproperty="jpda.address" name="@{name}" transport="${debug-transport}">
 729 |                     <classpath>
 730 |                         <path path="@{classpath}"/>
 731 |                     </classpath>
 732 |                 </nbjpdastart>
 733 |             </sequential>
 734 |         </macrodef>
 735 |         <macrodef name="nbjpdareload" uri="http://www.netbeans.org/ns/web-project/1">
 736 |             <attribute default="${build.classes.dir}" name="dir"/>
 737 |             <sequential>
 738 |                 <nbjpdareload>
 739 |                     <fileset dir="@{dir}" includes="${fix.classes}">
 740 |                         <include name="${fix.includes}*.class"/>
 741 |                     </fileset>
 742 |                 </nbjpdareload>
 743 |             </sequential>
 744 |         </macrodef>
 745 |         <macrodef name="nbjpdaappreloaded" uri="http://www.netbeans.org/ns/web-project/1">
 746 |             <sequential>
 747 |                 <nbjpdaappreloaded/>
 748 |             </sequential>
 749 |         </macrodef>
 750 |     </target>
 751 |     <target name="-init-debug-args">
 752 |         <property name="version-output" value="java version &quot;${ant.java.version}"/>
 753 |         <condition property="have-jdk-older-than-1.4">
 754 |             <or>
 755 |                 <contains string="${version-output}" substring="java version &quot;1.0"/>
 756 |                 <contains string="${version-output}" substring="java version &quot;1.1"/>
 757 |                 <contains string="${version-output}" substring="java version &quot;1.2"/>
 758 |                 <contains string="${version-output}" substring="java version &quot;1.3"/>
 759 |             </or>
 760 |         </condition>
 761 |         <condition else="-Xdebug" property="debug-args-line" value="-Xdebug -Xnoagent -Djava.compiler=none">
 762 |             <istrue value="${have-jdk-older-than-1.4}"/>
 763 |         </condition>
 764 |         <condition else="dt_socket" property="debug-transport-by-os" value="dt_shmem">
 765 |             <os family="windows"/>
 766 |         </condition>
 767 |         <condition else="${debug-transport-by-os}" property="debug-transport" value="${debug.transport}">
 768 |             <isset property="debug.transport"/>
 769 |         </condition>
 770 |     </target>
 771 |     <target depends="-init-debug-args" name="-init-macrodef-debug">
 772 |         <macrodef name="debug" uri="http://www.netbeans.org/ns/web-project/1">
 773 |             <attribute default="${main.class}" name="classname"/>
 774 |             <attribute default="${debug.classpath}:${j2ee.platform.classpath}" name="classpath"/>
 775 |             <attribute default="${application.args.param}" name="args"/>
 776 |             <element name="customize" optional="true"/>
 777 |             <sequential>
 778 |                 <java classname="@{classname}" fork="true">
 779 |                     <jvmarg line="${endorsed.classpath.cmd.line.arg}"/>
 780 |                     <jvmarg line="${debug-args-line}"/>
 781 |                     <jvmarg value="-Xrunjdwp:transport=${debug-transport},address=${jpda.address}"/>
 782 |                     <jvmarg line="${runmain.jvmargs}"/>
 783 |                     <classpath>
 784 |                         <path path="@{classpath}"/>
 785 |                     </classpath>
 786 |                     <syspropertyset>
 787 |                         <propertyref prefix="run-sys-prop."/>
 788 |                         <mapper from="run-sys-prop.*" to="*" type="glob"/>
 789 |                     </syspropertyset>
 790 |                     <arg line="@{args}"/>
 791 |                     <customize/>
 792 |                 </java>
 793 |             </sequential>
 794 |         </macrodef>
 795 |     </target>
 796 |     <target name="-init-taskdefs">
 797 |         <fail unless="libs.CopyLibs.classpath">
 798 | The libs.CopyLibs.classpath property is not set up.
 799 | This property must point to 
 800 | org-netbeans-modules-java-j2seproject-copylibstask.jar file which is part
 801 | of NetBeans IDE installation and is usually located at 
 802 | &lt;netbeans_installation&gt;/java&lt;version&gt;/ant/extra folder.
 803 | Either open the project in the IDE and make sure CopyLibs library
 804 | exists or setup the property manually. For example like this:
 805 |  ant -Dlibs.CopyLibs.classpath=a/path/to/org-netbeans-modules-java-j2seproject-copylibstask.jar
 806 |                 </fail>
 807 |         <taskdef classpath="${libs.CopyLibs.classpath}" resource="org/netbeans/modules/java/j2seproject/copylibstask/antlib.xml"/>
 808 |     </target>
 809 |     <target name="-init-ap-cmdline-properties">
 810 |         <property name="annotation.processing.enabled" value="true"/>
 811 |         <property name="annotation.processing.processors.list" value=""/>
 812 |         <property name="annotation.processing.run.all.processors" value="true"/>
 813 |         <property name="javac.processorpath" value="${javac.classpath}"/>
 814 |         <property name="javac.test.processorpath" value="${javac.test.classpath}"/>
 815 |         <condition property="ap.supported.internal" value="true">
 816 |             <not>
 817 |                 <matches pattern="1\.[0-5](\..*)?" string="${javac.source}"/>
 818 |             </not>
 819 |         </condition>
 820 |     </target>
 821 |     <target depends="-init-ap-cmdline-properties" if="ap.supported.internal" name="-init-ap-cmdline-supported">
 822 |         <condition else="" property="ap.processors.internal" value="-processor ${annotation.processing.processors.list}">
 823 |             <isfalse value="${annotation.processing.run.all.processors}"/>
 824 |         </condition>
 825 |         <condition else="" property="ap.proc.none.internal" value="-proc:none">
 826 |             <isfalse value="${annotation.processing.enabled}"/>
 827 |         </condition>
 828 |     </target>
 829 |     <target depends="-init-ap-cmdline-properties,-init-ap-cmdline-supported" name="-init-ap-cmdline">
 830 |         <property name="ap.cmd.line.internal" value=""/>
 831 |     </target>
 832 |     <!--
 833 |                 pre NB7.2 profiling section; consider it deprecated
 834 |             -->
 835 |     <target depends="-profile-pre-init, init, -profile-post-init, -profile-init-check" if="profiler.info.jvmargs.agent" name="profile-init"/>
 836 |     <target if="profiler.info.jvmargs.agent" name="-profile-pre-init">
 837 |         <!-- Empty placeholder for easier customization. -->
 838 |         <!-- You can override this target in the ../build.xml file. -->
 839 |     </target>
 840 |     <target if="profiler.info.jvmargs.agent" name="-profile-post-init">
 841 |         <!-- Empty placeholder for easier customization. -->
 842 |         <!-- You can override this target in the ../build.xml file. -->
 843 |     </target>
 844 |     <target depends="-profile-pre-init, init, -profile-post-init" if="profiler.info.jvmargs.agent" name="-profile-init-check">
 845 |         <fail unless="profiler.info.jvm">Must set JVM to use for profiling in profiler.info.jvm</fail>
 846 |         <fail unless="profiler.info.jvmargs.agent">Must set profiler agent JVM arguments in profiler.info.jvmargs.agent</fail>
 847 |     </target>
 848 |     <!--
 849 |                 end of pre NB7.2 profiling section
 850 |             -->
 851 |     <target depends="-pre-init,-init-private,-init-user,-init-project,-do-init,-post-init,-init-check,-init-macrodef-property,-init-macrodef-javac,-init-macrodef-test,-init-macrodef-test-debug,-init-macrodef-java,-init-macrodef-nbjpda,-init-macrodef-nbjsdebug,-init-macrodef-debug,-init-taskdefs,-init-ap-cmdline" name="init"/>
 852 |     <!--
 853 |                 COMPILATION SECTION
 854 |             -->
 855 |     <target depends="init" if="no.dist.ear.dir" name="deps-module-jar" unless="no.deps"/>
 856 |     <target depends="init" if="dist.ear.dir" name="deps-ear-jar" unless="no.deps"/>
 857 |     <target depends="init, deps-module-jar, deps-ear-jar" name="deps-jar" unless="no.deps"/>
 858 |     <target depends="init,deps-jar" name="-pre-pre-compile">
 859 |         <mkdir dir="${build.classes.dir}"/>
 860 |     </target>
 861 |     <target name="-pre-compile">
 862 |         <!-- Empty placeholder for easier customization. -->
 863 |         <!-- You can override this target in the ../build.xml file. -->
 864 |     </target>
 865 |     <target name="-copy-webdir">
 866 |         <copy todir="${build.web.dir}">
 867 |             <fileset dir="${web.docbase.dir}" excludes="${build.web.excludes},${excludes}" includes="${includes}"/>
 868 |         </copy>
 869 |         <copy todir="${build.web.dir}/WEB-INF">
 870 |             <fileset dir="${webinf.dir}" excludes="${build.web.excludes}"/>
 871 |         </copy>
 872 |     </target>
 873 |     <target depends="init, deps-jar, -pre-pre-compile, -pre-compile, -copy-manifest, -copy-persistence-xml, -copy-webdir, library-inclusion-in-archive,library-inclusion-in-manifest" if="have.sources" name="-do-compile">
 874 |         <webproject2:javac destdir="${build.classes.dir}" gensrcdir="${build.generated.sources.dir}"/>
 875 |         <copy todir="${build.classes.dir}">
 876 |             <fileset dir="${src.dir}" excludes="${build.classes.excludes},${excludes}" includes="${includes}"/>
 877 |         </copy>
 878 |     </target>
 879 |     <target if="has.custom.manifest" name="-copy-manifest">
 880 |         <mkdir dir="${build.meta.inf.dir}"/>
 881 |         <copy todir="${build.meta.inf.dir}">
 882 |             <fileset dir="${conf.dir}" includes="MANIFEST.MF"/>
 883 |         </copy>
 884 |     </target>
 885 |     <target if="has.persistence.xml" name="-copy-persistence-xml">
 886 |         <mkdir dir="${build.web.dir}/WEB-INF/classes/META-INF"/>
 887 |         <copy todir="${build.web.dir}/WEB-INF/classes/META-INF">
 888 |             <fileset dir="${persistence.xml.dir}" includes="persistence.xml orm.xml"/>
 889 |         </copy>
 890 |     </target>
 891 |     <target name="-post-compile">
 892 |         <!-- Empty placeholder for easier customization. -->
 893 |         <!-- You can override this target in the ../build.xml file. -->
 894 |     </target>
 895 |     <target depends="init,deps-jar,-pre-pre-compile,-pre-compile,-do-compile,-post-compile" description="Compile project." name="compile"/>
 896 |     <target name="-pre-compile-single">
 897 |         <!-- Empty placeholder for easier customization. -->
 898 |         <!-- You can override this target in the ../build.xml file. -->
 899 |     </target>
 900 |     <target depends="init,deps-jar,-pre-pre-compile" name="-do-compile-single">
 901 |         <fail unless="javac.includes">Must select some files in the IDE or set javac.includes</fail>
 902 |         <webproject2:javac excludes="" gensrcdir="${build.generated.sources.dir}" includes="${javac.includes}"/>
 903 |         <copy todir="${build.classes.dir}">
 904 |             <fileset dir="${src.dir}" excludes="${build.classes.excludes},${excludes}" includes="${includes}"/>
 905 |         </copy>
 906 |     </target>
 907 |     <target name="-post-compile-single">
 908 |         <!-- Empty placeholder for easier customization. -->
 909 |         <!-- You can override this target in the ../build.xml file. -->
 910 |     </target>
 911 |     <target depends="init,deps-jar,-pre-pre-compile,-pre-compile-single,-do-compile-single,-post-compile-single" name="compile-single"/>
 912 |     <property name="jspc.schemas" value="/resources/schemas/"/>
 913 |     <property name="jspc.dtds" value="/resources/dtds/"/>
 914 |     <target depends="compile" description="Test compile JSP pages to expose compilation errors." if="do.compile.jsps" name="compile-jsps">
 915 |         <mkdir dir="${build.generated.dir}/src"/>
 916 |         <java classname="org.netbeans.modules.web.project.ant.JspC" failonerror="true" fork="true">
 917 |             <arg value="-uriroot"/>
 918 |             <arg file="${basedir}/${build.web.dir}"/>
 919 |             <arg value="-d"/>
 920 |             <arg file="${basedir}/${build.generated.dir}/src"/>
 921 |             <arg value="-die1"/>
 922 |             <arg value="-schemas ${jspc.schemas}"/>
 923 |             <arg value="-dtds ${jspc.dtds}"/>
 924 |             <arg value="-compilerSourceVM ${javac.source}"/>
 925 |             <arg value="-compilerTargetVM ${javac.target}"/>
 926 |             <arg value="-javaEncoding ${source.encoding}"/>
 927 |             <arg value="-sysClasspath ${libs.jsp-compilation-syscp.classpath}"/>
 928 |             <classpath path="${java.home}/../lib/tools.jar:${libs.jsp-compiler.classpath}:${libs.jsp-compilation.classpath}"/>
 929 |         </java>
 930 |         <mkdir dir="${build.generated.dir}/classes"/>
 931 |         <webproject2:javac classpath="${build.classes.dir}:${libs.jsp-compilation.classpath}:${javac.classpath}:${j2ee.platform.classpath}" destdir="${build.generated.dir}/classes" srcdir="${build.generated.dir}/src"/>
 932 |     </target>
 933 |     <target depends="compile" if="jsp.includes" name="-do-compile-single-jsp">
 934 |         <fail unless="javac.jsp.includes">Must select some files in the IDE or set javac.jsp.includes</fail>
 935 |         <mkdir dir="${build.generated.dir}/src"/>
 936 |         <java classname="org.netbeans.modules.web.project.ant.JspCSingle" failonerror="true" fork="true">
 937 |             <arg value="-uriroot"/>
 938 |             <arg file="${basedir}/${build.web.dir}"/>
 939 |             <arg value="-d"/>
 940 |             <arg file="${basedir}/${build.generated.dir}/src"/>
 941 |             <arg value="-die1"/>
 942 |             <arg value="-schemas ${jspc.schemas}"/>
 943 |             <arg value="-dtds ${jspc.dtds}"/>
 944 |             <arg value="-sysClasspath ${libs.jsp-compilation-syscp.classpath}"/>
 945 |             <arg value="-jspc.files"/>
 946 |             <arg path="${jsp.includes}"/>
 947 |             <arg value="-compilerSourceVM ${javac.source}"/>
 948 |             <arg value="-compilerTargetVM ${javac.target}"/>
 949 |             <arg value="-javaEncoding ${source.encoding}"/>
 950 |             <classpath path="${java.home}/../lib/tools.jar:${libs.jsp-compiler.classpath}:${libs.jsp-compilation.classpath}"/>
 951 |         </java>
 952 |         <mkdir dir="${build.generated.dir}/classes"/>
 953 |         <webproject2:javac classpath="${build.classes.dir}:${libs.jsp-compilation.classpath}:${javac.classpath}:${j2ee.platform.classpath}" destdir="${build.generated.dir}/classes" srcdir="${build.generated.dir}/src">
 954 |             <customize>
 955 |                 <patternset includes="${javac.jsp.includes}"/>
 956 |             </customize>
 957 |         </webproject2:javac>
 958 |     </target>
 959 |     <target name="compile-single-jsp">
 960 |         <fail unless="jsp.includes">Must select a file in the IDE or set jsp.includes</fail>
 961 |         <antcall target="-do-compile-single-jsp"/>
 962 |     </target>
 963 |     <!--
 964 |                 DIST BUILDING SECTION
 965 |             -->
 966 |     <target name="-pre-dist">
 967 |         <!-- Empty placeholder for easier customization. -->
 968 |         <!-- You can override this target in the ../build.xml file. -->
 969 |     </target>
 970 |     <target depends="init,compile,compile-jsps,-pre-dist" if="do.war.package.without.custom.manifest" name="-do-dist-without-manifest">
 971 |         <dirname file="${dist.war}" property="dist.jar.dir"/>
 972 |         <mkdir dir="${dist.jar.dir}"/>
 973 |         <jar compress="${jar.compress}" jarfile="${dist.war}">
 974 |             <fileset dir="${build.web.dir}" excludes="WEB-INF/classes/.netbeans_*,${dist.archive.excludes}"/>
 975 |         </jar>
 976 |     </target>
 977 |     <target depends="init,compile,compile-jsps,-pre-dist" if="do.war.package.with.custom.manifest" name="-do-dist-with-manifest">
 978 |         <dirname file="${dist.war}" property="dist.jar.dir"/>
 979 |         <mkdir dir="${dist.jar.dir}"/>
 980 |         <jar compress="${jar.compress}" jarfile="${dist.war}" manifest="${build.meta.inf.dir}/MANIFEST.MF">
 981 |             <fileset dir="${build.web.dir}" excludes="WEB-INF/classes/.netbeans_*,${dist.archive.excludes}"/>
 982 |         </jar>
 983 |     </target>
 984 |     <target depends="init,compile,compile-jsps,-pre-dist" if="do.tmp.war.package.without.custom.manifest" name="-do-tmp-dist-without-manifest">
 985 |         <dirname file="${dist.war}" property="dist.jar.dir"/>
 986 |         <mkdir dir="${dist.jar.dir}"/>
 987 |         <jar compress="${jar.compress}" jarfile="${dist.war}">
 988 |             <fileset dir="${build.web.dir}" excludes="WEB-INF/classes/.netbeans_*,${dist.archive.excludes}"/>
 989 |         </jar>
 990 |     </target>
 991 |     <target depends="init,compile,compile-jsps,-pre-dist" if="do.tmp.war.package.with.custom.manifest" name="-do-tmp-dist-with-manifest">
 992 |         <dirname file="${dist.war}" property="dist.jar.dir"/>
 993 |         <mkdir dir="${dist.jar.dir}"/>
 994 |         <jar compress="${jar.compress}" jarfile="${dist.war}" manifest="${build.meta.inf.dir}/MANIFEST.MF">
 995 |             <fileset dir="${build.web.dir}" excludes="WEB-INF/classes/.netbeans_*,${dist.archive.excludes}"/>
 996 |         </jar>
 997 |     </target>
 998 |     <target depends="init,compile,compile-jsps,-pre-dist,-do-dist-with-manifest,-do-dist-without-manifest" name="do-dist"/>
 999 |     <target depends="init" if="dist.ear.dir" name="library-inclusion-in-manifest">
1000 |         <copyfiles files="${file.reference.spring-webmvc-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1001 |         <copyfiles files="${file.reference.spring-security-taglibs-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1002 |         <copyfiles files="${file.reference.spring-web-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1003 |         <copyfiles files="${file.reference.spring-aop-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1004 |         <copyfiles files="${file.reference.spring-asm-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1005 |         <copyfiles files="${file.reference.spring-beans-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1006 |         <copyfiles files="${file.reference.spring-context-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1007 |         <copyfiles files="${file.reference.spring-core-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1008 |         <copyfiles files="${file.reference.spring-expression-3.0.5.RELEASE.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1009 |         <copyfiles files="${file.reference.commons-logging-1.2.jar}" iftldtodir="${build.web.dir}/WEB-INF" todir="${dist.ear.dir}/lib"/>
1010 |         <mkdir dir="${build.web.dir}/META-INF"/>
1011 |         <manifest file="${build.web.dir}/META-INF/MANIFEST.MF" mode="update"/>
1012 |     </target>
1013 |     <target depends="init" name="library-inclusion-in-archive" unless="dist.ear.dir">
1014 |         <copyfiles files="${file.reference.spring-webmvc-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1015 |         <copyfiles files="${file.reference.spring-security-taglibs-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1016 |         <copyfiles files="${file.reference.spring-web-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1017 |         <copyfiles files="${file.reference.spring-aop-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1018 |         <copyfiles files="${file.reference.spring-asm-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1019 |         <copyfiles files="${file.reference.spring-beans-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1020 |         <copyfiles files="${file.reference.spring-context-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1021 |         <copyfiles files="${file.reference.spring-core-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1022 |         <copyfiles files="${file.reference.spring-expression-3.0.5.RELEASE.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1023 |         <copyfiles files="${file.reference.commons-logging-1.2.jar}" todir="${build.web.dir}/WEB-INF/lib"/>
1024 |     </target>
1025 |     <target depends="init" if="dist.ear.dir" name="-clean-webinf-lib">
1026 |         <delete dir="${build.web.dir}/WEB-INF/lib"/>
1027 |     </target>
1028 |     <target depends="init,-clean-webinf-lib,compile,compile-jsps,-pre-dist,library-inclusion-in-manifest" if="do.tmp.war.package" name="do-ear-dist">
1029 |         <dirname file="${dist.ear.war}" property="dist.jar.dir"/>
1030 |         <mkdir dir="${dist.jar.dir}"/>
1031 |         <jar compress="${jar.compress}" jarfile="${dist.ear.war}" manifest="${build.web.dir}/META-INF/MANIFEST.MF">
1032 |             <fileset dir="${build.web.dir}" excludes="WEB-INF/classes/.netbeans_*,${dist.archive.excludes}"/>
1033 |         </jar>
1034 |     </target>
1035 |     <target name="-post-dist">
1036 |         <!-- Empty placeholder for easier customization. -->
1037 |         <!-- You can override this target in the ../build.xml file. -->
1038 |     </target>
1039 |     <target depends="init,compile,-pre-dist,do-dist,-post-dist" description="Build distribution (WAR)." name="dist"/>
1040 |     <target depends="init,-clean-webinf-lib,-init-cos,compile,-pre-dist,do-ear-dist,-post-dist" description="Build distribution (WAR) to be packaged into an EAR." name="dist-ear"/>
1041 |     <!--
1042 |                 EXECUTION SECTION
1043 |             -->
1044 |     <target depends="run-deploy,run-display-browser" description="Deploy to server and show in browser." name="run"/>
1045 |     <target name="-pre-run-deploy">
1046 |         <!-- Empty placeholder for easier customization. -->
1047 |         <!-- You can override this target in the ../build.xml file. -->
1048 |     </target>
1049 |     <target name="-post-run-deploy">
1050 |         <!-- Empty placeholder for easier customization. -->
1051 |         <!-- You can override this target in the ../build.xml file. -->
1052 |     </target>
1053 |     <target name="-pre-nbmodule-run-deploy">
1054 |         <!-- Empty placeholder for easier customization. -->
1055 |         <!-- This target can be overriden by NetBeans modules. Don't override it directly, use -pre-run-deploy task instead. -->
1056 |     </target>
1057 |     <target name="-post-nbmodule-run-deploy">
1058 |         <!-- Empty placeholder for easier customization. -->
1059 |         <!-- This target can be overriden by NetBeans modules. Don't override it directly, use -post-run-deploy task instead. -->
1060 |     </target>
1061 |     <target name="-run-deploy-am">
1062 |         <!-- Task to deploy to the Access Manager runtime. -->
1063 |     </target>
1064 |     <target depends="init,-init-cos,compile,compile-jsps,-do-compile-single-jsp,-pre-dist,-do-tmp-dist-with-manifest,-do-tmp-dist-without-manifest,-pre-run-deploy,-pre-nbmodule-run-deploy,-run-deploy-nb,-init-deploy-ant,-deploy-ant,-run-deploy-am,-post-nbmodule-run-deploy,-post-run-deploy,-do-update-breakpoints" name="run-deploy"/>
1065 |     <target if="netbeans.home" name="-run-deploy-nb">
1066 |         <nbdeploy clientUrlPart="${client.urlPart}" debugmode="false" forceRedeploy="${forceRedeploy}"/>
1067 |     </target>
1068 |     <target name="-init-deploy-ant" unless="netbeans.home">
1069 |         <property name="deploy.ant.archive" value="${dist.war}"/>
1070 |         <property name="deploy.ant.docbase.dir" value="${web.docbase.dir}"/>
1071 |         <property name="deploy.ant.resource.dir" value="${resource.dir}"/>
1072 |         <property name="deploy.ant.enabled" value="true"/>
1073 |     </target>
1074 |     <target depends="dist,-run-undeploy-nb,-init-deploy-ant,-undeploy-ant" name="run-undeploy"/>
1075 |     <target if="netbeans.home" name="-run-undeploy-nb">
1076 |         <fail message="Undeploy is not supported from within the IDE"/>
1077 |     </target>
1078 |     <target depends="init,-pre-dist,dist,-post-dist" name="verify">
1079 |         <nbverify file="${dist.war}"/>
1080 |     </target>
1081 |     <target depends="run-deploy,-init-display-browser,-display-browser-nb-old,-display-browser-nb,-display-browser-cl" name="run-display-browser"/>
1082 |     <target if="do.display.browser" name="-init-display-browser">
1083 |         <condition property="do.display.browser.nb.old">
1084 |             <and>
1085 |                 <isset property="netbeans.home"/>
1086 |                 <not>
1087 |                     <isset property="browser.context"/>
1088 |                 </not>
1089 |             </and>
1090 |         </condition>
1091 |         <condition property="do.display.browser.nb">
1092 |             <and>
1093 |                 <isset property="netbeans.home"/>
1094 |                 <isset property="browser.context"/>
1095 |             </and>
1096 |         </condition>
1097 |         <condition property="do.display.browser.cl">
1098 |             <isset property="deploy.ant.enabled"/>
1099 |         </condition>
1100 |     </target>
1101 |     <target if="do.display.browser.nb.old" name="-display-browser-nb-old">
1102 |         <nbbrowse url="${client.url}"/>
1103 |     </target>
1104 |     <target if="do.display.browser.nb" name="-display-browser-nb">
1105 |         <nbbrowse context="${browser.context}" url="${client.url}" urlPath="${client.urlPart}"/>
1106 |     </target>
1107 |     <target if="do.display.browser.cl" name="-get-browser" unless="browser">
1108 |         <condition property="browser" value="rundll32">
1109 |             <os family="windows"/>
1110 |         </condition>
1111 |         <condition else="" property="browser.args" value="url.dll,FileProtocolHandler">
1112 |             <os family="windows"/>
1113 |         </condition>
1114 |         <condition property="browser" value="/usr/bin/open">
1115 |             <os family="mac"/>
1116 |         </condition>
1117 |         <property environment="env"/>
1118 |         <condition property="browser" value="${env.BROWSER}">
1119 |             <isset property="env.BROWSER"/>
1120 |         </condition>
1121 |         <condition property="browser" value="/usr/bin/firefox">
1122 |             <available file="/usr/bin/firefox"/>
1123 |         </condition>
1124 |         <condition property="browser" value="/usr/local/firefox/firefox">
1125 |             <available file="/usr/local/firefox/firefox"/>
1126 |         </condition>
1127 |         <condition property="browser" value="/usr/bin/mozilla">
1128 |             <available file="/usr/bin/mozilla"/>
1129 |         </condition>
1130 |         <condition property="browser" value="/usr/local/mozilla/mozilla">
1131 |             <available file="/usr/local/mozilla/mozilla"/>
1132 |         </condition>
1133 |         <condition property="browser" value="/usr/sfw/lib/firefox/firefox">
1134 |             <available file="/usr/sfw/lib/firefox/firefox"/>
1135 |         </condition>
1136 |         <condition property="browser" value="/opt/csw/bin/firefox">
1137 |             <available file="/opt/csw/bin/firefox"/>
1138 |         </condition>
1139 |         <condition property="browser" value="/usr/sfw/lib/mozilla/mozilla">
1140 |             <available file="/usr/sfw/lib/mozilla/mozilla"/>
1141 |         </condition>
1142 |         <condition property="browser" value="/opt/csw/bin/mozilla">
1143 |             <available file="/opt/csw/bin/mozilla"/>
1144 |         </condition>
1145 |     </target>
1146 |     <target depends="-get-browser" if="do.display.browser.cl" name="-display-browser-cl">
1147 |         <fail unless="browser">
1148 |                     Browser not found, cannot launch the deployed application. Try to set the BROWSER environment variable.
1149 |                 </fail>
1150 |         <property name="browse.url" value="${deploy.ant.client.url}${client.urlPart}"/>
1151 |         <echo>Launching ${browse.url}</echo>
1152 |         <exec executable="${browser}" spawn="true">
1153 |             <arg line="${browser.args} ${browse.url}"/>
1154 |         </exec>
1155 |     </target>
1156 |     <target depends="init,-init-cos,compile-single" name="run-main">
1157 |         <fail unless="run.class">Must select one file in the IDE or set run.class</fail>
1158 |         <webproject1:java classname="${run.class}"/>
1159 |     </target>
1160 |     <target depends="init,compile-test-single,-pre-test-run-single" name="run-test-with-main">
1161 |         <fail unless="run.class">Must select one file in the IDE or set run.class</fail>
1162 |         <webproject1:java classname="${run.class}" classpath="${run.test.classpath}"/>
1163 |     </target>
1164 |     <target depends="init" if="netbeans.home" name="-do-update-breakpoints">
1165 |         <webproject1:nbjpdaappreloaded/>
1166 |     </target>
1167 |     <!--
1168 |                 DEBUGGING SECTION
1169 |             -->
1170 |     <target depends="init,-init-cos,compile,compile-jsps,-do-compile-single-jsp,-pre-dist,-do-tmp-dist-with-manifest,-do-tmp-dist-without-manifest" description="Debug project in IDE." if="netbeans.home" name="debug">
1171 |         <nbstartserver debugmode="true"/>
1172 |         <antcall target="connect-debugger"/>
1173 |         <nbdeploy clientUrlPart="${client.urlPart}" debugmode="true" forceRedeploy="true"/>
1174 |         <antcall target="debug-display-browser-old"/>
1175 |         <antcall target="debug-display-browser"/>
1176 |         <antcall target="connect-client-debugger"/>
1177 |     </target>
1178 |     <target if="do.debug.server" name="connect-debugger" unless="is.debugged">
1179 |         <condition property="listeningcp" value="sourcepath">
1180 |             <istrue value="${j2ee.compile.on.save}"/>
1181 |         </condition>
1182 |         <nbjpdaconnect address="${jpda.address}" host="${jpda.host}" listeningcp="${listeningcp}" name="${name}" transport="${jpda.transport}">
1183 |             <classpath>
1184 |                 <path path="${debug.classpath}:${j2ee.platform.classpath}"/>
1185 |             </classpath>
1186 |             <sourcepath>
1187 |                 <path path="${web.docbase.dir}"/>
1188 |             </sourcepath>
1189 |         </nbjpdaconnect>
1190 |     </target>
1191 |     <target if="do.display.browser.debug.old" name="debug-display-browser-old">
1192 |         <nbbrowse url="${client.url}"/>
1193 |     </target>
1194 |     <target if="do.display.browser.debug" name="debug-display-browser">
1195 |         <nbbrowse context="${browser.context}" url="${client.url}" urlPath="${client.urlPart}"/>
1196 |     </target>
1197 |     <target if="do.debug.client" name="connect-client-debugger">
1198 |         <webproject1:nbjsdebugstart webUrl="${client.url}"/>
1199 |     </target>
1200 |     <target depends="init,compile-test-single" if="netbeans.home" name="-debug-start-debuggee-main-test">
1201 |         <fail unless="debug.class">Must select one file in the IDE or set debug.class</fail>
1202 |         <webproject1:debug classname="${debug.class}" classpath="${debug.test.classpath}"/>
1203 |     </target>
1204 |     <target depends="init,compile-test-single,-debug-start-debugger-main-test,-debug-start-debuggee-main-test" if="netbeans.home" name="debug-test-with-main"/>
1205 |     <target depends="init,compile,compile-jsps,-do-compile-single-jsp,debug" if="netbeans.home" name="debug-single"/>
1206 |     <target depends="init" if="netbeans.home" name="-debug-start-debugger-main-test">
1207 |         <webproject1:nbjpdastart classpath="${debug.test.classpath}" name="${debug.class}"/>
1208 |     </target>
1209 |     <target depends="init" if="netbeans.home" name="-debug-start-debugger">
1210 |         <webproject1:nbjpdastart name="${debug.class}"/>
1211 |     </target>
1212 |     <target depends="init,compile-single" if="netbeans.home" name="-debug-start-debuggee-single">
1213 |         <fail unless="debug.class">Must select one file in the IDE or set debug.class</fail>
1214 |         <webproject1:debug classname="${debug.class}"/>
1215 |     </target>
1216 |     <target depends="init,compile-single,-debug-start-debugger,-debug-start-debuggee-single" if="netbeans.home" name="debug-single-main"/>
1217 |     <target depends="init" name="-pre-debug-fix">
1218 |         <fail unless="fix.includes">Must set fix.includes</fail>
1219 |         <property name="javac.includes" value="${fix.includes}.java"/>
1220 |     </target>
1221 |     <target depends="init,-pre-debug-fix,compile-single" if="netbeans.home" name="-do-debug-fix">
1222 |         <webproject1:nbjpdareload/>
1223 |     </target>
1224 |     <target depends="init,-pre-debug-fix,-do-debug-fix" if="netbeans.home" name="debug-fix"/>
1225 |     <!--
1226 |             =================
1227 |             PROFILING SECTION
1228 |             =================
1229 |             -->
1230 |     <!--
1231 |                 pre NB7.2 profiling section; consider it deprecated
1232 |             -->
1233 |     <target description="Profile a J2EE project in the IDE." if="profiler.info.jvmargs.agent" name="-profile-pre72">
1234 |         <condition else="start-profiled-server" property="profiler.startserver.target" value="start-profiled-server-extraargs">
1235 |             <isset property="profiler.info.jvmargs.extra"/>
1236 |         </condition>
1237 |         <antcall target="${profiler.startserver.target}"/>
1238 |         <antcall target="run"/>
1239 |         <antcall target="-profile-start-loadgen"/>
1240 |     </target>
1241 |     <target if="profiler.info.jvmargs.agent" name="start-profiled-server">
1242 |         <nbstartprofiledserver forceRestart="${profiler.j2ee.serverForceRestart}" javaPlatform="${profiler.info.javaPlatform}" startupTimeout="${profiler.j2ee.serverStartupTimeout}">
1243 |             <jvmarg value="${profiler.info.jvmargs.agent}"/>
1244 |             <jvmarg value="${profiler.j2ee.agentID}"/>
1245 |         </nbstartprofiledserver>
1246 |     </target>
1247 |     <target if="profiler.info.jvmargs.agent" name="start-profiled-server-extraargs">
1248 |         <nbstartprofiledserver forceRestart="${profiler.j2ee.serverForceRestart}" javaPlatform="${profiler.info.javaPlatform}" startupTimeout="${profiler.j2ee.serverStartupTimeout}">
1249 |             <jvmarg value="${profiler.info.jvmargs.extra}"/>
1250 |             <jvmarg value="${profiler.info.jvmargs.agent}"/>
1251 |             <jvmarg value="${profiler.j2ee.agentID}"/>
1252 |         </nbstartprofiledserver>
1253 |     </target>
1254 |     <target depends="profile-init,compile-test-single" if="profiler.info.jvmargs.agent" name="-profile-test-single-pre72">
1255 |         <fail unless="netbeans.home">This target only works when run from inside the NetBeans IDE.</fail>
1256 |         <nbprofiledirect>
1257 |             <classpath>
1258 |                 <path path="${run.test.classpath}"/>
1259 |                 <path path="${j2ee.platform.classpath}"/>
1260 |             </classpath>
1261 |         </nbprofiledirect>
1262 |         <junit dir="${profiler.info.dir}" errorproperty="tests.failed" failureproperty="tests.failed" fork="true" jvm="${profiler.info.jvm}" showoutput="true">
1263 |             <env key="${profiler.info.pathvar}" path="${profiler.info.agentpath}:${profiler.current.path}"/>
1264 |             <jvmarg value="${profiler.info.jvmargs.agent}"/>
1265 |             <jvmarg line="${profiler.info.jvmargs}"/>
1266 |             <test name="${profile.class}"/>
1267 |             <classpath>
1268 |                 <path path="${run.test.classpath}"/>
1269 |                 <path path="${j2ee.platform.classpath}"/>
1270 |             </classpath>
1271 |             <syspropertyset>
1272 |                 <propertyref prefix="test-sys-prop."/>
1273 |                 <mapper from="test-sys-prop.*" to="*" type="glob"/>
1274 |             </syspropertyset>
1275 |             <formatter type="brief" usefile="false"/>
1276 |             <formatter type="xml"/>
1277 |         </junit>
1278 |     </target>
1279 |     <target if="netbeans.home" name="-profile-check">
1280 |         <condition property="profiler.configured">
1281 |             <or>
1282 |                 <contains casesensitive="true" string="${run.jvmargs.ide}" substring="-agentpath:"/>
1283 |                 <contains casesensitive="true" string="${run.jvmargs.ide}" substring="-javaagent:"/>
1284 |             </or>
1285 |         </condition>
1286 |     </target>
1287 |     <target depends="init,-init-cos,compile,compile-jsps,-do-compile-single-jsp,-pre-dist,-do-tmp-dist-with-manifest,-do-tmp-dist-without-manifest" name="-do-profile">
1288 |         <startprofiler/>
1289 |         <nbstartserver profilemode="true"/>
1290 |         <nbdeploy clientUrlPart="${client.urlPart}" forceRedeploy="true" profilemode="true"/>
1291 |         <antcall target="debug-display-browser-old"/>
1292 |         <antcall target="debug-display-browser"/>
1293 |         <antcall target="-profile-start-loadgen"/>
1294 |     </target>
1295 |     <target depends="-profile-check,-profile-pre72" description="Profile a J2EE project in the IDE." if="profiler.configured" name="profile" unless="profiler.info.jvmargs.agent">
1296 |         <antcall target="-do-profile"/>
1297 |     </target>
1298 |     <target depends="-profile-test-single-pre72" name="profile-test-single"/>
1299 |     <target depends="-profile-check" if="profiler.configured" name="profile-test" unless="profiler.info.jvmargs.agent">
1300 |         <startprofiler/>
1301 |         <antcall target="test-single"/>
1302 |     </target>
1303 |     <target if="profiler.loadgen.path" name="-profile-start-loadgen">
1304 |         <loadgenstart path="${profiler.loadgen.path}"/>
1305 |     </target>
1306 |     <!--
1307 |                 JAVADOC SECTION
1308 |             -->
1309 |     <target depends="init" if="have.sources" name="javadoc-build">
1310 |         <mkdir dir="${dist.javadoc.dir}"/>
1311 |         <javadoc additionalparam="${javadoc.additionalparam}" author="${javadoc.author}" charset="UTF-8" destdir="${dist.javadoc.dir}" docencoding="UTF-8" encoding="${javadoc.encoding.used}" failonerror="true" noindex="${javadoc.noindex}" nonavbar="${javadoc.nonavbar}" notree="${javadoc.notree}" private="${javadoc.private}" source="${javac.source}" splitindex="${javadoc.splitindex}" use="${javadoc.use}" useexternalfile="true" version="${javadoc.version}" windowtitle="${javadoc.windowtitle}">
1312 |             <classpath>
1313 |                 <path path="${javac.classpath}:${j2ee.platform.classpath}"/>
1314 |             </classpath>
1315 |             <fileset dir="${src.dir}" excludes="${excludes}" includes="${includes}">
1316 |                 <filename name="**/*.java"/>
1317 |             </fileset>
1318 |             <fileset dir="${build.generated.sources.dir}" erroronmissingdir="false">
1319 |                 <include name="**/*.java"/>
1320 |             </fileset>
1321 |         </javadoc>
1322 |         <copy todir="${dist.javadoc.dir}">
1323 |             <fileset dir="${src.dir}" excludes="${excludes}" includes="${includes}">
1324 |                 <filename name="**/doc-files/**"/>
1325 |             </fileset>
1326 |             <fileset dir="${build.generated.sources.dir}" erroronmissingdir="false">
1327 |                 <include name="**/doc-files/**"/>
1328 |             </fileset>
1329 |         </copy>
1330 |     </target>
1331 |     <target depends="init,javadoc-build" if="netbeans.home" name="javadoc-browse" unless="no.javadoc.preview">
1332 |         <nbbrowse file="${dist.javadoc.dir}/index.html"/>
1333 |     </target>
1334 |     <target depends="init,javadoc-build,javadoc-browse" description="Build Javadoc." name="javadoc"/>
1335 |     <!--
1336 |                 
1337 |                 TEST COMPILATION SECTION
1338 |             -->
1339 |     <target depends="init,compile" if="have.tests" name="-pre-pre-compile-test">
1340 |         <mkdir dir="${build.test.classes.dir}"/>
1341 |         <property name="j2ee.platform.embeddableejb.classpath" value=""/>
1342 |     </target>
1343 |     <target name="-pre-compile-test">
1344 |         <!-- Empty placeholder for easier customization. -->
1345 |         <!-- You can override this target in the ../build.xml file. -->
1346 |     </target>
1347 |     <target depends="init,compile,-pre-pre-compile-test,-pre-compile-test" if="have.tests" name="-do-compile-test">
1348 |         <webproject2:javac classpath="${javac.test.classpath}:${j2ee.platform.classpath}:${j2ee.platform.embeddableejb.classpath}" debug="true" destdir="${build.test.classes.dir}" srcdir="${test.src.dir}"/>
1349 |         <copy todir="${build.test.classes.dir}">
1350 |             <fileset dir="${test.src.dir}" excludes="${build.classes.excludes},${excludes}" includes="${includes}"/>
1351 |         </copy>
1352 |     </target>
1353 |     <target name="-post-compile-test">
1354 |         <!-- Empty placeholder for easier customization. -->
1355 |         <!-- You can override this target in the ../build.xml file. -->
1356 |     </target>
1357 |     <target depends="init,compile,-pre-pre-compile-test,-pre-compile-test,-do-compile-test,-post-compile-test" name="compile-test"/>
1358 |     <target name="-pre-compile-test-single">
1359 |         <!-- Empty placeholder for easier customization. -->
1360 |         <!-- You can override this target in the ../build.xml file. -->
1361 |     </target>
1362 |     <target depends="init,compile,-pre-pre-compile-test,-pre-compile-test-single" if="have.tests" name="-do-compile-test-single">
1363 |         <fail unless="javac.includes">Must select some files in the IDE or set javac.includes</fail>
1364 |         <webproject2:javac classpath="${javac.test.classpath}:${j2ee.platform.classpath}:${j2ee.platform.embeddableejb.classpath}" debug="true" destdir="${build.test.classes.dir}" excludes="" includes="${javac.includes}" srcdir="${test.src.dir}"/>
1365 |         <copy todir="${build.test.classes.dir}">
1366 |             <fileset dir="${test.src.dir}" excludes="${build.classes.excludes},${excludes}" includes="${includes}"/>
1367 |         </copy>
1368 |     </target>
1369 |     <target name="-post-compile-test-single">
1370 |         <!-- Empty placeholder for easier customization. -->
1371 |         <!-- You can override this target in the ../build.xml file. -->
1372 |     </target>
1373 |     <target depends="init,compile,-pre-pre-compile-test,-pre-compile-test-single,-do-compile-test-single,-post-compile-test-single" name="compile-test-single"/>
1374 |     <!--
1375 |                 
1376 |                 TEST EXECUTION SECTION
1377 |             -->
1378 |     <target depends="init" if="have.tests" name="-pre-test-run">
1379 |         <mkdir dir="${build.test.results.dir}"/>
1380 |     </target>
1381 |     <target depends="init,compile-test,-pre-test-run" if="have.tests" name="-do-test-run">
1382 |         <webproject2:test includes="${includes}" testincludes="**/*Test.java"/>
1383 |     </target>
1384 |     <target depends="init,compile-test,-pre-test-run,-do-test-run" if="have.tests" name="-post-test-run">
1385 |         <fail if="tests.failed" unless="ignore.failing.tests">Some tests failed; see details above.</fail>
1386 |     </target>
1387 |     <target depends="init" if="have.tests" name="test-report"/>
1388 |     <target depends="init" if="netbeans.home+have.tests" name="-test-browse"/>
1389 |     <target depends="init,compile-test,-pre-test-run,-do-test-run,test-report,-post-test-run,-test-browse" description="Run unit tests." name="test"/>
1390 |     <target depends="init" if="have.tests" name="-pre-test-run-single">
1391 |         <mkdir dir="${build.test.results.dir}"/>
1392 |     </target>
1393 |     <target depends="init,compile-test-single,-pre-test-run-single" if="have.tests" name="-do-test-run-single">
1394 |         <fail unless="test.includes">Must select some files in the IDE or set test.includes</fail>
1395 |         <webproject2:test excludes="" includes="${test.includes}" testincludes="${test.includes}"/>
1396 |     </target>
1397 |     <target depends="init,compile-test-single,-pre-test-run-single,-do-test-run-single" if="have.tests" name="-post-test-run-single">
1398 |         <fail if="tests.failed" unless="ignore.failing.tests">Some tests failed; see details above.</fail>
1399 |     </target>
1400 |     <target depends="init,compile-test-single,-pre-test-run-single,-do-test-run-single,-post-test-run-single" description="Run single unit test." name="test-single"/>
1401 |     <target depends="init,compile-test-single,-pre-test-run-single" if="have.tests" name="-do-test-run-single-method">
1402 |         <fail unless="test.class">Must select some files in the IDE or set test.class</fail>
1403 |         <fail unless="test.method">Must select some method in the IDE or set test.method</fail>
1404 |         <webproject2:test excludes="" includes="${javac.includes}" testincludes="${test.class}" testmethods="${test.method}"/>
1405 |     </target>
1406 |     <target depends="init,compile-test-single,-pre-test-run-single,-do-test-run-single-method" if="have.tests" name="-post-test-run-single-method">
1407 |         <fail if="tests.failed" unless="ignore.failing.tests">Some tests failed; see details above.</fail>
1408 |     </target>
1409 |     <target depends="init,compile-test-single,-pre-test-run-single,-do-test-run-single-method,-post-test-run-single-method" description="Run single unit test." name="test-single-method"/>
1410 |     <!--
1411 |                 
1412 |                 TEST DEBUGGING SECTION
1413 |             -->
1414 |     <target depends="init,compile-test-single,-pre-test-run-single" if="have.tests" name="-debug-start-debuggee-test">
1415 |         <fail unless="test.class">Must select one file in the IDE or set test.class</fail>
1416 |         <webproject2:test-debug excludes="" includes="${javac.includes}" testClass="${test.class}" testincludes="${javac.includes}"/>
1417 |     </target>
1418 |     <target depends="init,compile-test-single,-pre-test-run-single" if="have.tests" name="-debug-start-debuggee-test-method">
1419 |         <fail unless="test.class">Must select one file in the IDE or set test.class</fail>
1420 |         <fail unless="test.method">Must select some method in the IDE or set test.method</fail>
1421 |         <webproject2:test-debug excludes="" includes="${javac.includes}" testClass="${test.class}" testMethod="${test.method}" testincludes="${test.class}" testmethods="${test.method}"/>
1422 |     </target>
1423 |     <target depends="init,compile-test" if="netbeans.home+have.tests" name="-debug-start-debugger-test">
1424 |         <webproject1:nbjpdastart classpath="${debug.test.classpath}" name="${test.class}"/>
1425 |     </target>
1426 |     <target depends="init,compile-test,-debug-start-debugger-test,-debug-start-debuggee-test" name="debug-test"/>
1427 |     <target depends="init,compile-test-single,-debug-start-debugger-test,-debug-start-debuggee-test-method" name="debug-test-method"/>
1428 |     <target depends="init,-pre-debug-fix,compile-test-single" if="netbeans.home" name="-do-debug-fix-test">
1429 |         <webproject1:nbjpdareload dir="${build.test.classes.dir}"/>
1430 |     </target>
1431 |     <target depends="init,-pre-debug-fix,-do-debug-fix-test" if="netbeans.home" name="debug-fix-test"/>
1432 |     <!--
1433 |                 
1434 |                 CLEANUP SECTION
1435 |             -->
1436 |     <target depends="init" name="deps-clean" unless="no.deps"/>
1437 |     <target depends="init" name="do-clean">
1438 |         <condition property="build.dir.to.clean" value="${build.web.dir}">
1439 |             <isset property="dist.ear.dir"/>
1440 |         </condition>
1441 |         <property name="build.dir.to.clean" value="${build.web.dir}"/>
1442 |         <delete includeEmptyDirs="true" quiet="true">
1443 |             <fileset dir="${build.dir.to.clean}/WEB-INF/lib"/>
1444 |         </delete>
1445 |         <delete dir="${build.dir}"/>
1446 |         <available file="${build.dir.to.clean}/WEB-INF/lib" property="status.clean-failed" type="dir"/>
1447 |         <delete dir="${dist.dir}"/>
1448 |     </target>
1449 |     <target depends="do-clean" if="status.clean-failed" name="check-clean">
1450 |         <echo message="Warning: unable to delete some files in ${build.web.dir}/WEB-INF/lib - they are probably locked by the J2EE server. "/>
1451 |         <echo level="info" message="To delete all files undeploy the module from Server Registry in Runtime tab and then use Clean again."/>
1452 |     </target>
1453 |     <target depends="init" if="netbeans.home" name="undeploy-clean">
1454 |         <nbundeploy failOnError="false" startServer="false"/>
1455 |     </target>
1456 |     <target name="-post-clean">
1457 |         <!-- Empty placeholder for easier customization. -->
1458 |         <!-- You can override this target in the ../build.xml file. -->
1459 |     </target>
1460 |     <target depends="init,undeploy-clean,deps-clean,do-clean,check-clean,-post-clean" description="Clean build products." name="clean"/>
1461 |     <target depends="clean" description="Clean build products." name="clean-ear"/>
1462 | </project>
1463 | 


--------------------------------------------------------------------------------
/nbproject/genfiles.properties:
--------------------------------------------------------------------------------
1 | build.xml.data.CRC32=1978b2e4
2 | build.xml.script.CRC32=0cdce8e3
3 | build.xml.stylesheet.CRC32=651128d4@1.67.1.1
4 | # This file is used by a NetBeans-based IDE to track changes in generated files such as build-impl.xml.
5 | # Do not edit this file. You may delete it but then the IDE will never regenerate such files for you.
6 | nbproject/build-impl.xml.data.CRC32=1978b2e4
7 | nbproject/build-impl.xml.script.CRC32=222aa4d3
8 | nbproject/build-impl.xml.stylesheet.CRC32=99ea4b56@1.67.1.1
9 | 


--------------------------------------------------------------------------------
/nbproject/private/private.properties:
--------------------------------------------------------------------------------
 1 | deploy.ant.properties.file=/home/breakthesec/.netbeans/8.0/config/GlassFishEE6/Properties/gfv32054444240.properties
 2 | j2ee.platform.is.jsr109=true
 3 | j2ee.server.domain=/home/breakthesec/glassfish-4.0/glassfish/domains/domain1
 4 | j2ee.server.home=/home/breakthesec/glassfish-4.0/glassfish
 5 | j2ee.server.instance=[/home/breakthesec/glassfish-4.0/glassfish:/home/breakthesec/glassfish-4.0/glassfish/domains/domain1]deployer:gfv3ee6:localhost:4848
 6 | j2ee.server.middleware=/home/breakthesec/glassfish-4.0
 7 | javac.debug=true
 8 | javadoc.preview=true
 9 | selected.browser=default
10 | user.properties.file=/home/breakthesec/.netbeans/8.0/build.properties
11 | 


--------------------------------------------------------------------------------
/nbproject/private/private.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project-private xmlns="http://www.netbeans.org/ns/project-private/1">
 3 |     <editor-bookmarks xmlns="http://www.netbeans.org/ns/editor-bookmarks/1"/>
 4 |     <editor-bookmarks xmlns="http://www.netbeans.org/ns/editor-bookmarks/2" lastBookmarkId="0"/>
 5 |     <open-files xmlns="http://www.netbeans.org/ns/projectui-open-files/2">
 6 |         <group>
 7 |             <file>file:/home/breakthesec/NetBeansProjects/VulnerableSpring/src/java/org/cysecurity/springdemo/AdminController.java</file>
 8 |         </group>
 9 |     </open-files>
10 | </project-private>
11 | 


--------------------------------------------------------------------------------
/nbproject/private/retriever/catalog.xml:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/CSPF-Founder/VulnerableSpring/28a9b4738d9eb1e62c9de41a058b55573332d10a/nbproject/private/retriever/catalog.xml


--------------------------------------------------------------------------------
/nbproject/project.properties:
--------------------------------------------------------------------------------
  1 | annotation.processing.enabled=true
  2 | annotation.processing.enabled.in.editor=true
  3 | annotation.processing.processors.list=
  4 | annotation.processing.run.all.processors=true
  5 | annotation.processing.source.output=${build.generated.sources.dir}/ap-source-output
  6 | auxiliary.org-netbeans-modules-web-clientproject-api.js_2e_libs_2e_folder=js/libs
  7 | build.classes.dir=${build.web.dir}/WEB-INF/classes
  8 | build.classes.excludes=**/*.java,**/*.form
  9 | build.dir=build
 10 | build.generated.dir=${build.dir}/generated
 11 | build.generated.sources.dir=${build.dir}/generated-sources
 12 | build.test.classes.dir=${build.dir}/test/classes
 13 | build.test.results.dir=${build.dir}/test/results
 14 | build.web.dir=${build.dir}/web
 15 | build.web.excludes=${build.classes.excludes}
 16 | client.urlPart=
 17 | compile.jsps=false
 18 | conf.dir=${source.root}/conf
 19 | debug.classpath=${build.classes.dir}:${javac.classpath}
 20 | debug.test.classpath=\
 21 |     ${run.test.classpath}
 22 | display.browser=true
 23 | dist.dir=dist
 24 | dist.ear.war=${dist.dir}/${war.ear.name}
 25 | dist.javadoc.dir=${dist.dir}/javadoc
 26 | dist.war=${dist.dir}/${war.name}
 27 | endorsed.classpath=
 28 | excludes=
 29 | file.reference.commons-logging-1.2.jar=/media/breakthesec/Extra/GuestFolder/jar libs/commons-logging-1.2.jar
 30 | file.reference.spring-aop-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-aop-3.0.5.RELEASE.jar
 31 | file.reference.spring-asm-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-asm-3.0.5.RELEASE.jar
 32 | file.reference.spring-beans-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-beans-3.0.5.RELEASE.jar
 33 | file.reference.spring-context-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-context-3.0.5.RELEASE.jar
 34 | file.reference.spring-core-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-core-3.0.5.RELEASE.jar
 35 | file.reference.spring-expression-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-expression-3.0.5.RELEASE.jar
 36 | file.reference.spring-security-taglibs-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-security-taglibs-3.0.5.RELEASE.jar
 37 | file.reference.spring-web-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-web-3.0.5.RELEASE.jar
 38 | file.reference.spring-webmvc-3.0.5.RELEASE.jar=/media/breakthesec/Extra/GuestFolder/jar libs/spring-webmvc-3.0.5.RELEASE.jar
 39 | includes=**
 40 | j2ee.compile.on.save=true
 41 | j2ee.copy.static.files.on.save=true
 42 | j2ee.deploy.on.save=true
 43 | j2ee.platform=1.5
 44 | j2ee.platform.classpath=${j2ee.server.middleware}/mq/lib/jaxm-api.jar:${j2ee.server.home}/modules/endorsed/jaxb-api-osgi.jar:${j2ee.server.home}/modules/endorsed/javax.annotation-api.jar:${j2ee.server.home}/modules/endorsed/webservices-api-osgi.jar:${j2ee.server.home}/modules/javax.servlet.jsp-api.jar:${j2ee.server.home}/modules/javax.interceptor-api.jar:${j2ee.server.home}/modules/javax.persistence.jar:${j2ee.server.home}/modules/javax.enterprise.concurrent-api.jar:${j2ee.server.home}/modules/javax.transaction-api.jar:${j2ee.server.home}/modules/webservices-osgi.jar:${j2ee.server.home}/modules/javax.inject.jar:${j2ee.server.home}/modules/weld-osgi-bundle.jar:${j2ee.server.home}/modules/javax.mail.jar:${j2ee.server.home}/modules/jaxb-osgi.jar:${j2ee.server.home}/modules/javax.json.jar:${j2ee.server.home}/modules/javax.enterprise.concurrent.jar:${j2ee.server.home}/modules/javax.servlet-api.jar:${j2ee.server.home}/modules/javax.xml.rpc-api.jar:${j2ee.server.home}/modules/javax.websocket-api.jar:${j2ee.server.home}/modules/javax.enterprise.deploy-api.jar:${j2ee.server.home}/modules/javax.servlet.jsp.jar:${j2ee.server.home}/modules/javax.servlet.jsp.jstl.jar:${j2ee.server.home}/modules/javax.security.auth.message-api.jar:${j2ee.server.home}/modules/javax.servlet.jsp.jstl-api.jar:${j2ee.server.home}/modules/javax.resource-api.jar:${j2ee.server.home}/modules/javax.ejb-api.jar:${j2ee.server.home}/modules/javax.management.j2ee-api.jar:${j2ee.server.home}/modules/javax.ws.rs-api.jar:${j2ee.server.home}/modules/bean-validator.jar:${j2ee.server.home}/modules/javax.jms-api.jar:${j2ee.server.home}/modules/javax.security.jacc-api.jar:${j2ee.server.home}/modules/javax.batch-api.jar:${j2ee.server.home}/modules/javax.xml.registry-api.jar:${j2ee.server.home}/modules/javax.el.jar:${j2ee.server.home}/modules/javax.faces.jar
 45 | j2ee.platform.embeddableejb.classpath=${j2ee.server.home}/lib/embedded/glassfish-embedded-static-shell.jar
 46 | j2ee.platform.wscompile.classpath=${j2ee.server.home}/modules/webservices-osgi.jar
 47 | j2ee.platform.wsgen.classpath=${j2ee.server.home}/modules/webservices-osgi.jar:${j2ee.server.home}/modules/endorsed/webservices-api-osgi.jar:${j2ee.server.home}/modules/jaxb-osgi.jar:${j2ee.server.home}/modules/endorsed/jaxb-api-osgi.jar
 48 | j2ee.platform.wsimport.classpath=${j2ee.server.home}/modules/webservices-osgi.jar:${j2ee.server.home}/modules/endorsed/webservices-api-osgi.jar:${j2ee.server.home}/modules/jaxb-osgi.jar:${j2ee.server.home}/modules/endorsed/jaxb-api-osgi.jar
 49 | j2ee.platform.wsit.classpath=
 50 | j2ee.server.type=gfv3ee6
 51 | jar.compress=false
 52 | javac.classpath=\
 53 |     ${file.reference.spring-webmvc-3.0.5.RELEASE.jar}:\
 54 |     ${file.reference.spring-security-taglibs-3.0.5.RELEASE.jar}:\
 55 |     ${file.reference.spring-web-3.0.5.RELEASE.jar}:\
 56 |     ${file.reference.spring-aop-3.0.5.RELEASE.jar}:\
 57 |     ${file.reference.spring-asm-3.0.5.RELEASE.jar}:\
 58 |     ${file.reference.spring-beans-3.0.5.RELEASE.jar}:\
 59 |     ${file.reference.spring-context-3.0.5.RELEASE.jar}:\
 60 |     ${file.reference.spring-core-3.0.5.RELEASE.jar}:\
 61 |     ${file.reference.spring-expression-3.0.5.RELEASE.jar}:\
 62 |     ${file.reference.commons-logging-1.2.jar}
 63 | # Space-separated list of extra javac options
 64 | javac.compilerargs=
 65 | javac.debug=true
 66 | javac.deprecation=false
 67 | javac.processorpath=\
 68 |     ${javac.classpath}
 69 | javac.source=1.5
 70 | javac.target=1.5
 71 | javac.test.classpath=\
 72 |     ${javac.classpath}:\
 73 |     ${build.classes.dir}:\
 74 |     ${libs.junit.classpath}:\
 75 |     ${libs.junit_4.classpath}
 76 | javac.test.processorpath=${javac.test.classpath}
 77 | javadoc.additionalparam=
 78 | javadoc.author=false
 79 | javadoc.encoding=${source.encoding}
 80 | javadoc.noindex=false
 81 | javadoc.nonavbar=false
 82 | javadoc.notree=false
 83 | javadoc.preview=true
 84 | javadoc.private=false
 85 | javadoc.splitindex=true
 86 | javadoc.use=true
 87 | javadoc.version=false
 88 | javadoc.windowtitle=
 89 | jspcompilation.classpath=${jspc.classpath}:${javac.classpath}
 90 | lib.dir=${web.docbase.dir}/WEB-INF/lib
 91 | persistence.xml.dir=${conf.dir}
 92 | platform.active=default_platform
 93 | resource.dir=setup
 94 | run.test.classpath=\
 95 |     ${javac.test.classpath}:\
 96 |     ${build.test.classes.dir}
 97 | # Space-separated list of JVM arguments used when running a class with a main method or a unit test
 98 | # (you may also define separate properties like run-sys-prop.name=value instead of -Dname=value):
 99 | runmain.jvmargs=
100 | source.encoding=UTF-8
101 | source.root=src
102 | src.dir=${source.root}/java
103 | test.src.dir=test
104 | war.content.additional=
105 | war.ear.name=VulnerableSpring.war
106 | war.name=VulnerableSpring.war
107 | web.docbase.dir=web
108 | webinf.dir=web/WEB-INF
109 | 


--------------------------------------------------------------------------------
/nbproject/project.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://www.netbeans.org/ns/project/1">
 3 |     <type>org.netbeans.modules.web.project</type>
 4 |     <configuration>
 5 |         <data xmlns="http://www.netbeans.org/ns/web-project/3">
 6 |             <name>VulnerableSpring</name>
 7 |             <minimum-ant-version>1.6.5</minimum-ant-version>
 8 |             <web-module-libraries>
 9 |                 <library dirs="200">
10 |                     <file>${file.reference.spring-webmvc-3.0.5.RELEASE.jar}</file>
11 |                     <path-in-war>WEB-INF/lib</path-in-war>
12 |                 </library>
13 |                 <library dirs="200">
14 |                     <file>${file.reference.spring-security-taglibs-3.0.5.RELEASE.jar}</file>
15 |                     <path-in-war>WEB-INF/lib</path-in-war>
16 |                 </library>
17 |                 <library dirs="200">
18 |                     <file>${file.reference.spring-web-3.0.5.RELEASE.jar}</file>
19 |                     <path-in-war>WEB-INF/lib</path-in-war>
20 |                 </library>
21 |                 <library dirs="200">
22 |                     <file>${file.reference.spring-aop-3.0.5.RELEASE.jar}</file>
23 |                     <path-in-war>WEB-INF/lib</path-in-war>
24 |                 </library>
25 |                 <library dirs="200">
26 |                     <file>${file.reference.spring-asm-3.0.5.RELEASE.jar}</file>
27 |                     <path-in-war>WEB-INF/lib</path-in-war>
28 |                 </library>
29 |                 <library dirs="200">
30 |                     <file>${file.reference.spring-beans-3.0.5.RELEASE.jar}</file>
31 |                     <path-in-war>WEB-INF/lib</path-in-war>
32 |                 </library>
33 |                 <library dirs="200">
34 |                     <file>${file.reference.spring-context-3.0.5.RELEASE.jar}</file>
35 |                     <path-in-war>WEB-INF/lib</path-in-war>
36 |                 </library>
37 |                 <library dirs="200">
38 |                     <file>${file.reference.spring-core-3.0.5.RELEASE.jar}</file>
39 |                     <path-in-war>WEB-INF/lib</path-in-war>
40 |                 </library>
41 |                 <library dirs="200">
42 |                     <file>${file.reference.spring-expression-3.0.5.RELEASE.jar}</file>
43 |                     <path-in-war>WEB-INF/lib</path-in-war>
44 |                 </library>
45 |                 <library dirs="200">
46 |                     <file>${file.reference.commons-logging-1.2.jar}</file>
47 |                     <path-in-war>WEB-INF/lib</path-in-war>
48 |                 </library>
49 |             </web-module-libraries>
50 |             <web-module-additional-libraries/>
51 |             <source-roots>
52 |                 <root id="src.dir"/>
53 |             </source-roots>
54 |             <test-roots>
55 |                 <root id="test.src.dir"/>
56 |             </test-roots>
57 |         </data>
58 |         <spring-data xmlns="http://www.netbeans.org/ns/spring-data/1">
59 |             <config-files>
60 |                 <config-file>web/WEB-INF/applicationContext.xml</config-file>
61 |                 <config-file>web/WEB-INF/dispatcher-servlet.xml</config-file>
62 |             </config-files>
63 |             <config-file-groups>
64 |                 <config-file-group name="Default Group">
65 |                     <config-file>web/WEB-INF/applicationContext.xml</config-file>
66 |                     <config-file>web/WEB-INF/dispatcher-servlet.xml</config-file>
67 |                 </config-file-group>
68 |             </config-file-groups>
69 |         </spring-data>
70 |     </configuration>
71 | </project>
72 | 


--------------------------------------------------------------------------------
/src/conf/MANIFEST.MF:
--------------------------------------------------------------------------------
1 | Manifest-Version: 1.0
2 | 
3 | 


--------------------------------------------------------------------------------
/src/java/org/cysecurity/springdemo/AdminController.java:
--------------------------------------------------------------------------------
 1 | 
 2 | package org.cysecurity.springdemo;
 3 | 
 4 | import javax.servlet.http.HttpServletRequest;
 5 | import javax.servlet.http.HttpServletResponse;
 6 | import org.springframework.web.servlet.ModelAndView;
 7 | import org.springframework.web.servlet.mvc.AbstractController;
 8 | 
 9 | public class AdminController  extends AbstractController{
10 |             protected ModelAndView handleRequestInternal(HttpServletRequest request,
11 |                     HttpServletResponse response) throws Exception {
12 | 
13 |                     ModelAndView model = new ModelAndView("Admin");
14 |                     return model;
15 |             }
16 | }
17 | 


--------------------------------------------------------------------------------
/src/java/org/cysecurity/springdemo/ErrorController.java:
--------------------------------------------------------------------------------
 1 | 
 2 | package org.cysecurity.springdemo;
 3 | 
 4 | import javax.servlet.http.HttpServletRequest;
 5 | import javax.servlet.http.HttpServletResponse;
 6 | import org.springframework.web.servlet.ModelAndView;
 7 | import org.springframework.web.servlet.mvc.AbstractController;
 8 | 
 9 | public class ErrorController  extends AbstractController{
10 |             protected ModelAndView handleRequestInternal(HttpServletRequest request,
11 |                     HttpServletResponse response) throws Exception {
12 | 
13 |                     ModelAndView model = new ModelAndView("Error");
14 |                     return model;
15 |             }
16 | }
17 | 


--------------------------------------------------------------------------------
/src/java/org/cysecurity/springdemo/HelloController.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * To change this template, choose Tools | Templates
 3 |  * and open the template in the editor.
 4 |  */
 5 | 
 6 | package org.cysecurity.springdemo;
 7 | import javax.servlet.http.HttpServletRequest;
 8 | import javax.servlet.http.HttpServletResponse;
 9 | import org.springframework.web.servlet.ModelAndView;
10 | import org.springframework.web.servlet.mvc.AbstractController;
11 | 
12 |  
13 | public class HelloController  extends AbstractController{
14 |             protected ModelAndView handleRequestInternal(HttpServletRequest request,
15 |                     HttpServletResponse response) throws Exception {
16 | 
17 |                     ModelAndView model = new ModelAndView("HelloWorld");
18 |                     return model;
19 |             }
20 | }
21 | 


--------------------------------------------------------------------------------
/web/META-INF/context.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <Context antiJARLocking="true" path="/VulnerableSpring"/>
3 | 


--------------------------------------------------------------------------------
/web/WEB-INF/applicationContext.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <beans xmlns="http://www.springframework.org/schema/beans"
 3 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |        xmlns:p="http://www.springframework.org/schema/p"
 5 |        xmlns:aop="http://www.springframework.org/schema/aop"
 6 |        xmlns:tx="http://www.springframework.org/schema/tx"
 7 |        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
 8 |        http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd
 9 |        http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.0.xsd">
10 |     
11 |     <!--bean id="propertyConfigurer"
12 |           class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer"
13 |           p:location="/WEB-INF/jdbc.properties" />
14 |     
15 |     <bean id="dataSource"
16 |           class="org.springframework.jdbc.datasource.DriverManagerDataSource"
17 |           p:driverClassName="${jdbc.driverClassName}"
18 |           p:url="${jdbc.url}"
19 |           p:username="${jdbc.username}"
20 |           p:password="${jdbc.password}" /-->
21 |     
22 |     <!-- ADD PERSISTENCE SUPPORT HERE (jpa, hibernate, etc) -->
23 |     
24 | </beans>
25 | 


--------------------------------------------------------------------------------
/web/WEB-INF/dispatcher-servlet.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <beans xmlns="http://www.springframework.org/schema/beans"
 3 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |        xmlns:p="http://www.springframework.org/schema/p"
 5 |        xmlns:aop="http://www.springframework.org/schema/aop"
 6 |        xmlns:tx="http://www.springframework.org/schema/tx"
 7 |        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
 8 |        http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd
 9 | http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.0.xsd">
10 | 
11 |         <bean id="localeResolver"
12 | 		class="org.springframework.web.servlet.i18n.SessionLocaleResolver">
13 | 		<property name="defaultLocale" value="en" />
14 | 	</bean>
15 |         
16 |    	<bean id="localeChangeInterceptor"
17 | 		class="org.springframework.web.servlet.i18n.LocaleChangeInterceptor">
18 | 		<property name="paramName" value="language" />
19 | 	</bean>
20 | 
21 | 	<bean class="org.springframework.web.servlet.mvc.support.ControllerClassNameHandlerMapping" >
22 | 		<property name="interceptors">
23 | 		   <list>
24 | 			<ref bean="localeChangeInterceptor" />
25 | 		    </list>
26 | 		</property>
27 | 	</bean>
28 |     <!--
29 |     Most controllers will use the ControllerClassNameHandlerMapping above, but
30 |     for the index controller we are using ParameterizableViewController, so we must
31 |     define an explicit mapping for it.
32 |     -->
33 |     <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
34 |         <property name="mappings">
35 |             <props>
36 |                 <prop key="index.htm">indexController</prop>
37 |             </props>
38 |         </property>
39 |     </bean>
40 | 
41 |     	<bean class="org.cysecurity.springdemo.HelloController" />
42 |         <bean class="org.cysecurity.springdemo.AdminController" />      
43 |         <bean class="org.cysecurity.springdemo.ErrorController" />
44 |       
45 | 	<bean id="messageSource" class="org.springframework.context.support.ReloadableResourceBundleMessageSource">
46 |     <property name="basename" value="/WEB-INF/messages" />
47 | </bean>
48 |  
49 | 
50 |     <bean id="viewResolver"
51 |           class="org.springframework.web.servlet.view.InternalResourceViewResolver"
52 |           p:prefix="/WEB-INF/jsp/"
53 |           p:suffix=".jsp" /> 
54 |     
55 |     <!--
56 |     The index controller.
57 |     -->
58 |     <bean name="indexController"
59 |           class="org.springframework.web.servlet.mvc.ParameterizableViewController"
60 |           p:viewName="index" />
61 |     
62 | </beans>
63 | 


--------------------------------------------------------------------------------
/web/WEB-INF/glassfish-web.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <!DOCTYPE glassfish-web-app PUBLIC "-//GlassFish.org//DTD GlassFish Application Server 3.1 Servlet 3.0//EN" "http://glassfish.org/dtds/glassfish-web-app_3_0-1.dtd">
 3 | <glassfish-web-app error-url="">
 4 |   <class-loader delegate="true"/>
 5 |   <jsp-config>
 6 |     <property name="keepgenerated" value="true">
 7 |       <description>Keep a copy of the generated servlet class' java code.</description>
 8 |     </property>
 9 |   </jsp-config>
10 | </glassfish-web-app>
11 | 


--------------------------------------------------------------------------------
/web/WEB-INF/jsp/Admin.jsp:
--------------------------------------------------------------------------------
 1 | <%-- 
 2 |     Document   : admin
 3 |     Created on : 28 Dec, 2014, 7:51:18 PM
 4 |     Author     : breakthesec
 5 | --%>
 6 | <%
 7 |      if(session.getAttribute("privilege")!=null && session.getAttribute("privilege").equals("admin"))
 8 |    {    
 9 |      %>
10 | <%@page contentType="text/html" pageEncoding="UTF-8"%>
11 | <!DOCTYPE html>
12 | <html>
13 |     <head>
14 |         <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
15 |         <title>JSP Page</title>
16 |     </head>
17 |     <body>
18 |         <h1>Welcome to Admin Panel</h1>
19 |     </body>
20 | </html>
21 | <% 
22 |        
23 |    } else
24 |      {
25 |          response.sendRedirect("error.htm?msg=error.c403");
26 |      }
27 |      %>


--------------------------------------------------------------------------------
/web/WEB-INF/jsp/Error.jsp:
--------------------------------------------------------------------------------
 1 | <%@ page contentType="text/html;charset=UTF-8" %>
 2 | <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
 3 | <html>
 4 | <body>
 5 | <h1 style="color:red">Error Page :</h1>
 6 | 
 7 | <% 
 8 | 
 9 | out.print("<br/>");
10 | out.print("Hello "+session.getAttribute("privilege"));
11 | 
12 | %>
13 | 
14 | <h3>
15 | <spring:message code="${param.msg}" />
16 | </h3>
17 | 
18 | 
19 | </body>
20 | </html>


--------------------------------------------------------------------------------
/web/WEB-INF/jsp/HelloWorld.jsp:
--------------------------------------------------------------------------------
 1 | <%@ page contentType="text/html;charset=UTF-8" %>
 2 | <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
 3 | <html>
 4 | <body>
 5 | <h1>Spring Demo</h1>
 6 | <% 
 7 | if(session.getAttribute("privilege")==null)
 8 | {
 9 | session.setAttribute("privilege","user");
10 | }
11 | %>
12 | <a href="admin.htm">Go to Admin Panel</a>
13 | 
14 | 
15 | </body>
16 | </html>


--------------------------------------------------------------------------------
/web/WEB-INF/messages.properties:
--------------------------------------------------------------------------------
1 | welcome.springmvc=Welcome to Spring Demo Page
2 | error.c403=You are not allowed to Access this page


--------------------------------------------------------------------------------
/web/WEB-INF/messages_en.properties:
--------------------------------------------------------------------------------
1 | welcome.springmvc=Welcome to Spring Demo Page
2 | error.c403=You are not allowed to Access this page


--------------------------------------------------------------------------------
/web/WEB-INF/web.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
 3 |     <context-param>
 4 |         <param-name>contextConfigLocation</param-name>
 5 |         <param-value>/WEB-INF/applicationContext.xml</param-value>
 6 |     </context-param>
 7 |     <listener>
 8 |         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
 9 |     </listener>
10 |     <servlet>
11 |         <servlet-name>dispatcher</servlet-name>
12 |         <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
13 |         <load-on-startup>2</load-on-startup>
14 |     </servlet>
15 |     <servlet-mapping>
16 |         <servlet-name>dispatcher</servlet-name>
17 |         <url-pattern>*.htm</url-pattern>
18 |     </servlet-mapping>
19 |     <session-config>
20 |         <session-timeout>
21 |             30
22 |         </session-timeout>
23 |     </session-config>
24 |     <welcome-file-list>
25 |         <welcome-file>redirect.jsp</welcome-file>
26 |         </welcome-file-list>
27 |     </web-app>
28 | 


--------------------------------------------------------------------------------
/web/redirect.jsp:
--------------------------------------------------------------------------------
 1 | <%--
 2 | Views should be stored under the WEB-INF folder so that
 3 | they are not accessible except through controller process.
 4 | 
 5 | This JSP is here to provide a redirect to the dispatcher
 6 | servlet but should be the only JSP outside of WEB-INF.
 7 | --%>
 8 | <%@page contentType="text/html" pageEncoding="UTF-8"%>
 9 | <% 
10 |         response.sendRedirect("helloworld.htm");
11 | %>
12 | 


--------------------------------------------------------------------------------