Merge pull request #12 from psiinon/main

Check for JSP compilation failures

Author: psiinon

.github/workflows/ci.yml

@@ -21,3 +21,36 @@ jobs:
         cache: maven
     - name: Build with Maven
       run: mvn clean package
+
+    - name: Test wavsep
+      run: |
+        # Run wavsep, mapping the logs 
+        mkdir logs
+
+        # Pre create the logfile we need access to
+        LOG_FILE=localhost.$(date +%F).log
+        touch logs/$LOG_FILE
+        chmod -R a+r logs
+
+        docker run --rm -v $(pwd)/logs:/opt/tomcat/logs/:rw -v $(pwd)/target/wavsep.war:/opt/tomcat/webapps/wavsep.war:rw -p 8080:8080 -p 3306:3306 zaproxy/wavsep &
+
+        sleep 5
+
+        docker run --rm -v $(pwd):/zap/wrk/:rw --network host ghcr.io/zaproxy/zaproxy:nightly zap.sh -cmd -port 9090 -silent -autorun /zap/wrk/test/zap-spider.yaml
+
+        sleep 5
+
+        echo List logs dir
+        ls -l logs
+
+        cat logs/$LOG_FILE
+
+        grep "Unable to compile class" logs/$LOG_FILE >> grepout || true
+
+        if [ -s grepout ]; then
+          echo "Compilation failed"
+          exit 1
+        else
+          echo "Compilation passed"
+          exit 0
+        fi

test/zap-spider.yaml

@@ -0,0 +1,41 @@
+env:
+  contexts:
+  - name: wavsep
+    urls:
+    - http://127.0.0.1:8080/wavsep
+    includePaths:
+    - http://127.0.0.1:8080/wavsep.*
+    excludePaths:
+    # This URL is a test page with a deliberate compilation error 
+    - http://127.0.0.1:8080/wavsep/passive/info/info-server-stack-trace.jsp
+    authentication:
+      verification:
+        method: response
+        pollFrequency: 60
+        pollUnits: requests
+        pollUrl: ""
+        pollPostData: ""
+    sessionManagement:
+      method: cookie
+    technology:
+      exclude:
+      - Windows
+    structure: {}
+  parameters: {}
+jobs:
+- name: spider active
+  type: spider
+  parameters:
+    url: http://127.0.0.1:8080/wavsep/index-active.jsp
+    maxDepth: 0
+  tests:
+  - name: At least 100 URLs found
+    type: stats
+    onFail: INFO
+    statistic: automation.spider.urls.added
+    operator: '>='
+    value: 100
+- name: spider passive
+  type: spider
+  parameters:
+    url: http://127.0.0.1:8080/wavsep/index-passive.jsp