package com.l7tech.server.policy.assertion;

import com.l7tech.common.mime.ContentTypeHeader;
import com.l7tech.common.mime.NoSuchPartException;
import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.message.Message;
import com.l7tech.message.MimeKnob;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.SqlAttackAssertion;
import com.l7tech.server.message.AuthenticationContext;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.IOUtils;
import java.io.IOException;

public class ServerSqlAttackAssertion extends ServerInjectionThreatProtectionAssertion<SqlAttackAssertion> {
   private static final String[] d;

   public ServerSqlAttackAssertion(SqlAttackAssertion var1) {
      super(var1);
   }

   @Override
   protected AssertionStatus doCheckRequest(PolicyEnforcementContext var1, Message var2, String var3, AuthenticationContext var4) throws IOException, PolicyAssertionException {
      return this.applyThreatProtection(var1, var2, var3);
   }

   @Override
   protected AssertionStatus scanBody(Message var1, String var2) throws IOException {
      this.logAndAudit(AssertionMessages.SQLATTACK_SCANNING_BODY_TEXT, var2);
      ContentTypeHeader var3 = var1.getMimeKnob().getOuterContentType();
      String[] var10 = d;
      String var4 = var2 + var10[0];
      MimeKnob var5 = var1.getMimeKnob();

      try {
         byte[] var6 = IOUtils.slurpStream(var5.getEntireMessageBodyAsInputStream());
         String var7 = new String(var6, var3.getEncoding());
         StringBuilder var8 = new StringBuilder();
         String var9 = this.scan(var7, var8);
         if (var9 != null) {
            this.logAndAudit(AssertionMessages.SQLATTACK_DETECTED, var4, var8.toString(), var9);
            return this.getBadMessageStatus();
         }
      } catch (NoSuchPartException var11) {
         this.logAndAudit(AssertionMessages.SQLATTACK_CANNOT_PARSE, new String[]{var4, d[2]}, ExceptionUtils.getDebugException(var11));
         return this.getBadMessageStatus();
      }

      return AssertionStatus.NONE;
   }

   @Override
   protected String scan(String param1, StringBuilder param2) {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: aconst_null
      // 01: astore 3
      // 02: bipush -1
      // 03: istore 4
      // 05: aload 0
      // 06: getfield com/l7tech/server/policy/assertion/ServerSqlAttackAssertion.assertion Lcom/l7tech/policy/assertion/Assertion;
      // 09: checkcast com/l7tech/policy/assertion/SqlAttackAssertion
      // 0c: invokevirtual com/l7tech/policy/assertion/SqlAttackAssertion.getProtections ()Ljava/util/Set;
      // 0f: invokeinterface java/util/Set.iterator ()Ljava/util/Iterator; 1
      // 14: astore 5
      // 16: aload 5
      // 18: invokeinterface java/util/Iterator.hasNext ()Z 1
      // 1d: ifeq a7
      // 20: aload 5
      // 22: invokeinterface java/util/Iterator.next ()Ljava/lang/Object; 1
      // 27: checkcast java/lang/String
      // 2a: astore 6
      // 2c: aload 6
      // 2e: invokestatic com/l7tech/policy/assertion/SqlAttackAssertion.getProtectionPattern (Ljava/lang/String;)Ljava/util/regex/Pattern;
      // 31: astore 7
      // 33: aconst_null
      // 34: aload 7
      // 36: if_acmpne 5d
      // 39: aload 0
      // 3a: getstatic com/l7tech/gateway/common/audit/AssertionMessages.SQLATTACK_UNRECOGNIZED_PROTECTION Lcom/l7tech/gateway/common/audit/Messages$M;
      // 3d: bipush 1
      // 3e: anewarray 140
      // 41: dup
      // 42: bipush 0
      // 43: aload 6
      // 45: aastore
      // 46: invokevirtual com/l7tech/server/policy/assertion/ServerSqlAttackAssertion.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;)V
      // 49: new com/l7tech/server/policy/assertion/AssertionStatusException
      // 4c: dup
      // 4d: getstatic com/l7tech/policy/assertion/AssertionStatus.FAILED Lcom/l7tech/policy/assertion/AssertionStatus;
      // 50: getstatic com/l7tech/server/policy/assertion/ServerSqlAttackAssertion.d [Ljava/lang/String;
      // 53: bipush 4
      // 54: aaload
      // 55: invokespecial com/l7tech/server/policy/assertion/AssertionStatusException.<init> (Lcom/l7tech/policy/assertion/AssertionStatus;Ljava/lang/String;)V
      // 58: athrow
      // 59: invokestatic com/l7tech/server/policy/assertion/ServerSqlAttackAssertion.a (Lcom/l7tech/server/policy/assertion/AssertionStatusException;)Lcom/l7tech/server/policy/assertion/AssertionStatusException;
      // 5c: athrow
      // 5d: new java/lang/StringBuilder
      // 60: dup
      // 61: invokespecial java/lang/StringBuilder.<init> ()V
      // 64: astore 8
      // 66: aload 1
      // 67: aload 7
      // 69: aload 8
      // 6b: invokestatic com/l7tech/util/TextUtils.scanAndRecordMatch (Ljava/lang/String;Ljava/util/regex/Pattern;Ljava/lang/StringBuilder;)I
      // 6e: istore 9
      // 70: iload 9
      // 72: bipush -1
      // 73: if_icmpeq a4
      // 76: iload 4
      // 78: bipush -1
      // 79: if_icmpeq 91
      // 7c: goto 83
      // 7f: invokestatic com/l7tech/server/policy/assertion/ServerSqlAttackAssertion.a (Lcom/l7tech/server/policy/assertion/AssertionStatusException;)Lcom/l7tech/server/policy/assertion/AssertionStatusException;
      // 82: athrow
      // 83: iload 9
      // 85: iload 4
      // 87: if_icmpge a4
      // 8a: goto 91
      // 8d: invokestatic com/l7tech/server/policy/assertion/ServerSqlAttackAssertion.a (Lcom/l7tech/server/policy/assertion/AssertionStatusException;)Lcom/l7tech/server/policy/assertion/AssertionStatusException;
      // 90: athrow
      // 91: iload 9
      // 93: istore 4
      // 95: aload 2
      // 96: bipush 0
      // 97: invokevirtual java/lang/StringBuilder.setLength (I)V
      // 9a: aload 2
      // 9b: aload 8
      // 9d: invokevirtual java/lang/StringBuilder.append (Ljava/lang/CharSequence;)Ljava/lang/StringBuilder;
      // a0: pop
      // a1: aload 6
      // a3: astore 3
      // a4: goto 16
      // a7: aload 3
      // a8: areturn
      // try (20 -> 40): 40 com/l7tech/server/policy/assertion/AssertionStatusException
      // try (51 -> 57): 58 com/l7tech/server/policy/assertion/AssertionStatusException
      // try (54 -> 63): 64 com/l7tech/server/policy/assertion/AssertionStatusException
   }

   @Override
   protected void logAndAuditRequestAlreadyRouted() {
      this.logAndAudit(AssertionMessages.SQLATTACK_ALREADY_ROUTED);
   }

   @Override
   protected void logAndAuditResponseNotRouted() {
      this.logAndAudit(AssertionMessages.SQLATTACK_SKIP_RESPONSE_NOT_ROUTED);
   }

   @Override
   protected void logAndAuditMessageNotHttp() {
      this.logAndAudit(AssertionMessages.SQLATTACK_NOT_HTTP);
   }

   @Override
   protected void logAndAuditScanningUrlPath() {
      this.logAndAudit(AssertionMessages.SQLATTACK_SCANNING_URL_PATH);
   }

   @Override
   protected void logAndAuditAttackDetectedInUrlPath(StringBuilder var1, String var2, String var3) {
      this.logAndAudit(AssertionMessages.SQLATTACK_DETECTED_PATH, d[1], var2, var1.toString(), var3);
   }

   @Override
   protected void logAndAuditScanningUrlQueryString() {
      this.logAndAudit(AssertionMessages.SQLATTACK_SCANNING_URL_QUERY_STRING);
   }

   @Override
   protected void logAndAuditAttackDetectedInQueryParameter(StringBuilder var1, String var2, String var3) {
      this.logAndAudit(AssertionMessages.SQLATTACK_DETECTED_PARAM, d[3], var2, var1.toString(), var3);
   }

   @Override
   protected void logAndAuditAttackRejected() {
      this.logAndAudit(AssertionMessages.SQLATTACK_REJECTED, this.assertion.getTargetName());
   }

   @Override
   protected void logAndAuditCannotParse(String var1, String var2) {
      this.logAndAudit(AssertionMessages.SQLATTACK_CANNOT_PARSE, var1, var2);
   }

   private static AssertionStatusException a(AssertionStatusException var0) {
      return var0;
   }

   static {
      String[] var5 = new String[5];
      int var3 = 0;
      String var2 = "vsV\u007f\u0005\u0004&3>Qc\u0012\u001c\u000b\u0004{By\u0013\u00165vKa@\u0004\"{Kx";
      int var4 = "vsV\u007f\u0005\u0004&3>Qc\u0012\u001c\u000b\u0004{By\u0013\u00165vKa@\u0004\"{Kx".length();
      char var1 = '\r';
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 47;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = d(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     d = var5;
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "j\u0015,\u0017}x[\u0018%\u000f. m\u001e/\u0007{dHV\u0019'\u0007|+_J\u001f)\u0007{\u007fFW\u001e}\u0012y\u007f[]\u00023L";
                  var4 = "j\u0015,\u0017}x[\u0018%\u000f. m\u001e/\u0007{dHV\u0019'\u0007|+_J\u001f)\u0007{\u007fFW\u001e}\u0012y\u007f[]\u00023L".length();
                  var1 = 11;
                  var7 = -1;
            }

            var10000 = 65;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 110);
      }

      return var10000;
   }

   private static String d(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 121;
            case 1 -> 49;
            case 2 -> 28;
            case 3 -> 35;
            case 4 -> 89;
            case 5 -> 74;
            default -> 110;
         });
      }

      return new String(var10001).intern();
   }
}