0a99555401a033704f1f171baab6db11fb5528f2Allan Foster The contents of this file are subject to the terms
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster of the Common Development and Distribution License
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster (the License). You may not use this file except in
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster compliance with the License.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster You can obtain a copy of the License at
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster https://opensso.dev.java.net/public/CDDLv1.0.html or
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster See the License for the specific language governing
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster permission and limitations under the License.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster When distributing Covered Code, include this CDDL
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster Header Notice in each file and include the License file
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster If applicable, add the following below the CDDL Header,
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster with the fields enclosed by brackets [] replaced by
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster your own identifying information:
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster "Portions Copyrighted [year] [name of copyright owner]"
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster Copyright 2009 Sun Microsystems Inc. All Rights Reserved
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster Portions Copyrighted 2013 ForgeRock AS
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster This JSP used by the Fedlet performs the following:
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster 1) Retrieves the list of attributes from fedletXACMLQuery.jsp
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster 2) Invokes the method to retrieve the policy decision for the Resource URL.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster 3) Displays the Result.
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster<%@ page import="com.sun.identity.saml2.common.SAML2Utils" %>
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster<%@ page import="com.sun.identity.saml2.profile.XACMLQueryUtil" %>
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster<%@ page import="org.owasp.esapi.ESAPI" %>
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster String deployuri = request.getRequestURI();
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster int slashLoc = deployuri.indexOf("/", 1);
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster if (slashLoc != -1) {
0a99555401a033704f1f171baab6db11fb5528f2Allan Foster deployuri = deployuri.substring(0, slashLoc);
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<div class="MstDiv"><table width="100%" border="0" cellpadding="0" cellspacing="0" class="MstTblTop" title="">
<div class="MstDivTtl"><img name="ProdName" src="<%= deployuri %>/console/images/PrimaryProductName.png" alt="" /></div></td><td class="MstTdLogo" width="1%"><img name="RMRealm.mhCommon.BrandLogo" src="<%= deployuri %>/com_sun_web_ui/images/other/javalogo.gif" alt="Java(TM) Logo" border="0" height="55" width="31" /></td></tr></tbody></table>
<table class="MstTblEnd" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td><img name="RMRealm.mhCommon.EndorserLogo" src="<%= deployuri %>/com_sun_web_ui/images/masthead/masthead-sunname.gif" alt="Sun(TM) Microsystems,
Inc." align="right" border="0" height="10" width="108" /></td></tr></tbody></table></div><div class="SkpMedGry1"><a name="SkipAnchor2089" id="SkipAnchor2089"></a></div>
<div class="SkpMedGry1"><a href="#SkipAnchor4928"><img src="<%= deployuri %>/com_sun_web_ui/images/other/dot.gif" alt="Jump Over Tab Navigation Area. Current Selection is: Access Control" border="0" height="1" width="1" /></a></div>
String idpEntityID = request.getParameter("idpEntityID");
(idpEntityID.length() == 0)) {
SAML2Utils.bundle.getString("nullIDPEntityID"));
String spEntityID = request.getParameter("spEntityID");
(spEntityID.length() == 0)) {
SAML2Utils.bundle.getString("nullSPEntityID"));
String nameIDValue = request.getParameter("nameIDValue");
String newNameIDValue = nameIDValue.replace("%2F","/");
String resource = request.getParameter("resource");
if (!ESAPI.validator().isValidInput("HTTP Parameter Value: " + resource,
String action = request.getParameter("action");
String policy_decision = XACMLQueryUtil.getPolicyDecisionForFedlet(
if(resource!=null) resource = ESAPI.encoder().encodeForHTML(resource);
out.println("<tr>");
out.println("<td>");
out.println(resource);
out.println("</td>");
out.println("<td>");
out.println(policy_decision);
out.println("</td>");
SAML2Utils.debug.error("Error sending XACML Query " , ex);