[4.9.x] Add isInputValidationEnabled configuration at kernel Utils

core/org.wso2.carbon.utils/src/main/java/org/wso2/carbon/utils/CarbonUtils.java

@@ -1491,4 +1491,22 @@ private static String getMapDataAsString(Map<String, Object> data) {
  builder.append(StringUtils.join(inputs.iterator(), ", ")).append(" }");
  return builder.toString();
  }
+
+ /**
+ * Function to extract InputValidationEnabled configuration from carbon.xml.
+ * <pre>
+ * {@code
+ * <InputValidationEnabled>true</InputValidationEnabled>
+ * }
+ * </pre>
+ *
+ * @return isInputValidationEnabled.
+ */
+ public static boolean isInputValidationEnabled() {
+
+ String isInputValidationEnabledConfig = ServerConfiguration.getInstance().
+ getFirstProperty("InputValidationEnabled");
+
+ return isInputValidationEnabledConfig == null || Boolean.parseBoolean(isInputValidationEnabledConfig);
+ }
 }

core/org.wso2.carbon.utils/src/test/java/org/wso2/carbon/utils/CarbonUtilsTest.java

@@ -470,5 +470,17 @@ public void testArrayCopyOf() {
  Integer[] numbers = {1, 2, 3, 4, 5, 6, 7, 8, 9};
  Assert.assertEquals(CarbonUtils.arrayCopyOf(numbers), numbers);
  }
+
+ @Test(groups = {"org.wso2.carbon.utils.base"}, dependsOnMethods = "testGetServerConfiguration")
+ public void testIsInputValidationEnabledDefault() {
+ ServerConfiguration.getInstance().overrideConfigurationProperty("InputValidationEnabled", null);
+ Assert.assertTrue(CarbonUtils.isInputValidationEnabled());
+ }
+
+ @Test(groups = {"org.wso2.carbon.utils.base"}, dependsOnMethods = "testGetServerConfiguration")
+ public void testIsInputValidationEnabled() {
+ ServerConfiguration.getInstance().overrideConfigurationProperty("InputValidationEnabled", "false");
+ Assert.assertFalse(CarbonUtils.isInputValidationEnabled());
+ }
 }
 

core/org.wso2.carbon.utils/src/test/resources/carbon-utils/carbon.xml

@@ -349,6 +349,10 @@
  Enable following config to allow Emails as usernames. 
  -->
  <!--EnableEmailUserName>true</EnableEmailUserName-->
+ <!--
+ Enable following config to flag input validation configuration.
+ -->
+ <isInputValidationEnabled>true</isInputValidationEnabled>
 
  <!--
  Security configurations

distribution/kernel/carbon-home/repository/conf/carbon.xml

@@ -427,6 +427,10 @@
  Enable following config to allow Emails as usernames. 
  -->
  <EnableEmailUserName>false</EnableEmailUserName>
+ <!--
+ Enable following config to flag input validation configuration.
+ -->
+ <isInputValidationEnabled>true</isInputValidationEnabled>
  <!--EnablePasswordTrim>false</EnablePasswordTrim-->
  <!--
  Security configurations

distribution/kernel/carbon-home/repository/resources/conf/default.json

@@ -221,6 +221,6 @@
  "tenant_mgt.enable_tenant_theme_mgt" : true,
  "tenant_mgt.enable_tenant_validation_for_nonsaas_username" : true,
  "jce_provider.provider_name" : "BC",
- "signature_util.enable_sha256_algo" : true
-
+ "signature_util.enable_sha256_algo" : true,
+ "tenant_mgt.enable_input_validation" : true
 }

distribution/kernel/carbon-home/repository/resources/conf/templates/repository/conf/carbon.xml.j2

@@ -472,6 +472,10 @@
  Enable following config to allow Emails as usernames.
  -->
  <EnableEmailUserName>{{tenant_mgt.enable_email_domain | default('false')}}</EnableEmailUserName>
+ <!--
+ Enable following config to flag input validation configuration.
+ -->
+ <isInputValidationEnabled>{{tenant_mgt.enable_input_validation}}</isInputValidationEnabled>
  {% if password_trim.enable is defined %}
  <EnablePasswordTrim>{{password_trim.enable}}</EnablePasswordTrim>
  {% endif %}