René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Generated test didn't pass Spring Security's firewall.","articleBody":"**To Reproduce**\r\n\r\n1. Add Spring Security to dependencies\r\n2. Generate integration tests for controller's method which has `@PathVariable` parameter.\r\n\r\n```java\r\n    @GetMapping(\"/{name}\")\r\n    public String demo(@PathVariable String name) {\r\n        return name;\r\n    }\r\n```\r\n\r\n**Expected behavior**\r\n\r\nTest should not fail.\r\n\r\n**Actual behavior**\r\n\r\n~~~java\r\n/**\r\n     * @utbot.classUnderTest {@link BookController}\r\n     * @utbot.methodUnderTest {@link BookController#demo(String)}\r\n     */\r\n    @Test\r\n    @DisplayName(\"demo: name = '\\uFFEA#$\\\\\\\"'' (mutated from '#$\\\\\\\"'') -\u003e throw RequestRejectedException\")\r\n    public void testDemoThrowsRREWithNonEmptyString() throws Exception {\r\n        UriComponentsBuilder uriComponentsBuilder = fromPath(\"/{name}\");\r\n        Map map = new HashMap();\r\n        map.put(\"name\", \"\\uFFEA#$\\\\\\\"'\");\r\n        UriComponentsBuilder uriComponentsBuilder1 = uriComponentsBuilder.uriVariables(map);\r\n        String string = uriComponentsBuilder1.toUriString();\r\n        Object[] objectArray = {};\r\n        MockHttpServletRequestBuilder mockHttpServletRequestBuilder = get(string, objectArray);\r\n        \r\n        /* This test fails because method [org.springframework.test.web.servlet.MockMvc.perform] produces [org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the URL contained a potentially malicious String \"%25\"]\r\n            org.springframework.security.web.firewall.StrictHttpFirewall.rejectedBlacklistedUrls(StrictHttpFirewall.java:369)\r\n            org.springframework.security.web.firewall.StrictHttpFirewall.getFirewalledRequest(StrictHttpFirewall.java:336)\r\n            org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:194)\r\n            org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)\r\n            org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358)\r\n            org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271)\r\n            org.springframework.mock.web.MockFilterChain.doFilter(MockFilterChain.java:134)\r\n            org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100)\r\n            org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)\r\n            org.springframework.mock.web.MockFilterChain.doFilter(MockFilterChain.java:134)\r\n            org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93)\r\n            org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)\r\n            org.springframework.mock.web.MockFilterChain.doFilter(MockFilterChain.java:134)\r\n            org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)\r\n            org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)\r\n            org.springframework.mock.web.MockFilterChain.doFilter(MockFilterChain.java:134)\r\n            org.springframework.test.web.servlet.MockMvc.perform(MockMvc.java:183) */\r\n        mockMvc.perform(mockHttpServletRequestBuilder);\r\n    }\r\n    ///endregion\r\n~~~\r\n\r\n","author":{"url":"https://github.com/ancavar","@type":"Person","name":"ancavar"},"datePublished":"2023-12-19T19:24:10.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/2726/UTBotJava/issues/2726"}