### Test for XML operator rules

### Validate Scheme

# OK

{

	type => "rule",

	comment => "validateSchema (validate ok)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500005, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500006

		SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500007, \\

		        phase:3:,deny"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Successfully validated payload against Schema/s, 1 ],

		-debug => [ qr/XML parser error|validation failed|Failed to load/, 1 ],

		-error => [ qr/XML parser error|validation failed|Failed to load/, 1 ],

	},

	match_response => {

		status => qr/^200$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"

				xmlns:tns="http://www.bluebank.example.com/axis/getBalance.jws"

				xmlns:types="http://www.bluebank.example.com/axis/getBalance.jws/encodedTypes"

				xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

				xmlns:xsd="http://www.w3.org/2001/XMLSchema">

						<soap:Body soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

								<q1:getInput xmlns:q1="http://DefaultNamespace">

										<id xsi:type="xsd:string">12123</id>

								</q1:getInput>

						</soap:Body>

				</soap:Envelope>

			),

		),

	),

},

# Failed attribute value

{

	type => "rule",

	comment => "validateSchema (validate attribute value failed)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecAuditEngine RelevantOnly

		SecAuditLog "$ENV{AUDIT_LOG}"

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500008, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500009

		SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500010 \\

		        phase:2,deny,log,auditlog,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*'badval' is not a valid value of the local atomic type.*Schema validation failed/s, 1 ],

		-debug => [ qr/Successfully validated payload against Schema|\n\r?\n/, 1 ],

		audit => [ qr/^Message: Element.*'badval' is not a valid value of the local atomic type\.\nMessage:/m, 1 ],

	},

	match_response => {

		status => qr/^403$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"

				xmlns:tns="http://www.bluebank.example.com/axis/getBalance.jws"

				xmlns:types="http://www.bluebank.example.com/axis/getBalance.jws/encodedTypes"

				xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

				xmlns:xsd="http://www.w3.org/2001/XMLSchema">

						<soap:Body soap:mustUnderstand="badval" soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

								<q1:getInput xmlns:q1="http://DefaultNamespace">

										<id xsi:type="xsd:string">12123</id>

								</q1:getInput>

						</soap:Body>

				</soap:Envelope>

			),

		),

	),

},

# Failed validation

{

	type => "rule",

	comment => "validateSchema (validate failed)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecAuditEngine RelevantOnly

		SecAuditLog "$ENV{AUDIT_LOG}"

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500011, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500012

		SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500013 \\

		        phase:2,deny,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*element is not expected/s, 1 ],

		-debug => [ qr/XML parser error|Failed to load/, 1 ],

		-error => [ qr/XML parser error|Failed to load/, 1 ],

		audit => [ qr/^Message: Element.*This element is not expected.*\nMessage:/m, 1 ],

	},

	match_response => {

		status => qr/^403$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"

				xmlns:tns="http://www.bluebank.example.com/axis/getBalance.jws"

				xmlns:types="http://www.bluebank.example.com/axis/getBalance.jws/encodedTypes"

				xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

				xmlns:xsd="http://www.w3.org/2001/XMLSchema">

						<soap:xBody soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

								<q1:getInput xmlns:q1="http://DefaultNamespace">

										<id xsi:type="xsd:string">12123</id>

								</q1:getInput>

						</soap:xBody>

				</soap:Envelope>

			),

		),

	),

},

# Bad XML

{

	type => "rule",

	comment => "validateSchema (bad XML)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecAuditEngine RelevantOnly

		SecAuditLog "$ENV{AUDIT_LOG}"

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500014, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500015

		SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500016, \\

		        phase:2,deny,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error.*validation failed because content is not well formed/s, 1 ],

		-debug => [ qr/Failed to load|Successfully validated/, 1 ],

		-error => [ qr/Failed to load|Successfully validated/, 1 ],

		audit => [ qr/^Message: .*Failed parsing document.*\nMessage:/m, 1 ],

	},

	match_response => {

		status => qr/^403$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"

				xmlns:tns="http://www.bluebank.example.com/axis/getBalance.jws"

				xmlns:types="http://www.bluebank.example.com/axis/getBalance.jws/encodedTypes"

				xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

				xmlns:xsd="http://www.w3.org/2001/XMLSchema">

						<soap:Body soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

								<q1:getInput xmlns:q1="http://DefaultNamespace">

										<id xsi:type="xsd:string">12123</id>

								</q1:getInput>

						</soap:Body>

				</soap:Envelope>

			),

		),

	),

},

# Bad schema

{

	type => "rule",

	comment => "validateSchema (bad schema)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecAuditEngine RelevantOnly

		SecAuditLog "$ENV{AUDIT_LOG}"

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500017 \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500018

		SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope-bad.xsd" "id:500019 \\

		        phase:2,deny,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Failed to parse the XML resource.*Failed to load Schema/s, 1 ],

		audit => [ qr/^Message: .*Failed to parse the XML resource.*\nMessage: Rule processing failed/m, 1 ],

	},

	match_response => {

		status => qr/^200$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"

				xmlns:tns="http://www.bluebank.example.com/axis/getBalance.jws"

				xmlns:types="http://www.bluebank.example.com/axis/getBalance.jws/encodedTypes"

				xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

				xmlns:xsd="http://www.w3.org/2001/XMLSchema">

						<soap:Body soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

								<q1:getInput xmlns:q1="http://DefaultNamespace">

										<id xsi:type="xsd:string">12123</id>

								</q1:getInput>

						</soap:Body>

				</soap:Envelope>

			),

		),

	),

},

# Validate DTD

# OK

{

	type => "rule",

	comment => "validateDTD (validate ok)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500020, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500021

		SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" "id:500022, \\

		        phase:2,deny,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Successfully validated payload against DTD/s, 1 ],

		-debug => [ qr/XML parser error|validation failed|Failed to load/, 1 ],

		-error => [ qr/XML parser error|validation failed|Failed to load/, 1 ],

	},

	match_response => {

		status => qr/^200$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				<Envelope>

						<Body>

								<getInput>

										<id type="string">12123</id>

								</getInput>

						</Body>

				</Envelope>

			),

		),

	),

},

# Failed validation

{

	type => "rule",

	comment => "validateDTD (validate failed)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500023, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500024

		SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" "id:500025, \\

		        phase:2,deny,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*content does not follow the DTD/s, 1 ],

		-debug => [ qr/XML parser error|Failed to load/, 1 ],

		-error => [ qr/XML parser error|Failed to load/, 1 ],

	},

	match_response => {

		status => qr/^403$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				<Envelope>

						<xBody>

								<getInput>

										<id type="string">12123</id>

								</getInput>

						</xBody>

				</Envelope>

			),

		),

	),

},

# Bad XML

{

	type => "rule",

	comment => "validateDTD (bad XML)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500026, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500027

		SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" "id:500028, \\

		        phase:2,deny,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error.*validation failed because content is not well formed/s, 1 ],

		-debug => [ qr/Failed to load|Successfully validated/, 1 ],

		-error => [ qr/Failed to load|Successfully validated/, 1 ],

	},

	match_response => {

		status => qr/^403$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				<Envelop>

						<Body>

								<getInput>

										<id type="string">12123</id>

								</getInput>

						</Body>

				</Envelope>

			),

		),

	),

},

# Bad DTD

{

	type => "rule",

	comment => "validateDTD (bad DTD)",

	conf => qq(

		SecRuleEngine On

		SecRequestBodyAccess On

        SecXmlExternalEntity On

		SecDebugLog $ENV{DEBUG_LOG}

		SecDebugLogLevel 9

		SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500029, \\

		        phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"

		SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500030

		SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope-bad.dtd" "id:500031 \\

		        phase:2,deny,id:12345"

	),

	match_log => {

		debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Failed to load DTD/s, 1 ],

	},

	match_response => {

		status => qr/^200$/,

	},

	request => new HTTP::Request(

		POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",

		[

			"Content-Type" => "text/xml",

		],

		normalize_raw_request_data(

			q(

				<Envelope>

						<Body>

								<getInput>

										<id type="string">12123</id>

								</getInput>

						</Body>

				</Envelope>

			),

		),

	),

},