+ * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2014.12.04 표준프레임워크 최초 적용 (패키지 변경 및 소스 정리) + *+ */ +public class CkFilter implements Filter { + private static final Log log = LogFactory.getLog(CkFilter.class); + + private static final String IMAGE_BASE_DIR_KEY = "ck.image.dir"; + private static final String IMAGE_BASE_URL_KEY = "ck.image.url"; + private static final String IMAGE_ALLOW_TYPE_KEY = "ck.image.type.allow"; + private static final String IMAGE_SAVE_CLASS_KEY = "ck.image.save.class"; + + private CkImageSaver ckImageSaver; + + public void init(FilterConfig filterConfig) throws ServletException { + String properties = filterConfig.getInitParameter("properties"); + InputStream inStream = Thread.currentThread().getContextClassLoader().getResourceAsStream(properties); + Properties props = new Properties(); + try { + props.load(inStream); + } catch (IOException e) { + log.error(e); + } + + String imageBaseDir = (String) props.get(IMAGE_BASE_DIR_KEY); + String imageDomain = (String) props.get(IMAGE_BASE_URL_KEY); + + String[] allowFileTypeArr = null; + String allowFileType = (String) props.get(IMAGE_ALLOW_TYPE_KEY); + if (StringUtils.isNotBlank(allowFileType)) { + allowFileTypeArr = StringUtils.split(allowFileType, ","); + } + + String saveManagerClass = (String) props.get(IMAGE_SAVE_CLASS_KEY); + + ckImageSaver = new CkImageSaver(imageBaseDir, imageDomain, allowFileTypeArr, saveManagerClass); + + } + + public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException { + HttpServletRequest request = (HttpServletRequest) req; + HttpServletResponse response = (HttpServletResponse) res; + + if (request.getContentType() == null || request.getContentType().indexOf("multipart") == -1) { + // contentType 이 multipart 가 아니라면 스킵한다. + chain.doFilter(request, response); + } else { + ckImageSaver.saveAndReturnUrlToClient(request, response); + + } + } + + public void destroy() { + // no-op + } +} diff --git a/src/main/java/kcg/imis/cmmn/ckeditor/CkImageSaver.java b/src/main/java/kcg/imis/cmmn/ckeditor/CkImageSaver.java new file mode 100644 index 0000000..2da14c2 --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/ckeditor/CkImageSaver.java @@ -0,0 +1,158 @@ +/* + * CKEditor image upload module for Java. + * Copyright guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + * + * @author guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + */ +package kcg.imis.cmmn.ckeditor; + +import java.io.IOException; +import java.io.PrintWriter; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; + +import org.apache.commons.io.FilenameUtils; +import org.apache.commons.lang3.StringUtils; +import org.apache.commons.logging.Log; +import org.apache.commons.logging.LogFactory; +import org.springframework.web.multipart.MultipartFile; +import org.springframework.web.multipart.MultipartRequest; + +/** + * Created by guava on 1/20/14. + * 이미지 저장 처리 클래스 + * @author guavatak + * @since 2014.12.04 + * @version 1.0 + * @see + * + *
+ * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2014.12.04 표준프레임워크 최초 적용 (패키지 변경 및 소스 정리) + *+ */ +public class CkImageSaver { + private static final Log log = LogFactory.getLog(CkFilter.class); + + private static final String FUNC_NO = "CKEditorFuncNum"; + + private String imageBaseDir; + private String imageDomain; + private String[] allowFileTypeArr; + + private FileSaveManager fileSaveManager; + + public CkImageSaver(String imageBaseDir, String imageDomain, String[] allowFileTypeArr, String saveManagerClass) { + this.imageBaseDir = imageBaseDir; + if (imageBaseDir.endsWith("/")) { + StringUtils.removeEnd(imageBaseDir, "/"); + } + if (imageBaseDir.endsWith("\\")) { + StringUtils.removeEnd(imageBaseDir, "\\"); + } + + this.imageDomain = imageDomain; + if (imageDomain.endsWith("/")) { + StringUtils.removeEnd(imageDomain, "/"); + } + + this.allowFileTypeArr = allowFileTypeArr; + + if (StringUtils.isBlank(saveManagerClass)) { + fileSaveManager = new DefaultFileSaveManager(); + } else { + try { + Class klass = Class.forName(saveManagerClass); + fileSaveManager = (FileSaveManager) klass.newInstance(); + } catch (ClassNotFoundException e) { + log.error(e); + throw new RuntimeException(e); + } catch (InstantiationException e) { + log.error(e); + throw new RuntimeException(e); + } catch (IllegalAccessException e) { + log.error(e); + throw new RuntimeException(e); + } + } + } + + /** + * ckEditor로부터 넘어온 파일을 저장한다. + * 원래 소스는 Request 내의 데이터를 FileItem으로 파싱하여 파일을 저장하였으나, + * 파싱하지 못하는 버그가 발생하여 MultipartRequest로 변형하였다. + * + * @param request Request 객체 + * @param response Response 객체 + * @throws IOException IO 예외처리 + */ + public void saveAndReturnUrlToClient(final HttpServletRequest request, final HttpServletResponse response) throws IOException { + // Parse the request + try { + MultipartRequest req = (MultipartRequest) request; + MultipartFile f = req.getFile("upload"); + + String errorMessage = null; + String relUrl = null; + + if (isAllowFileType(FilenameUtils.getName(f.getOriginalFilename()))) { + relUrl = fileSaveManager.saveFile(f, imageBaseDir, imageDomain); + + } else { + errorMessage = "Restricted Image Format"; + } + + StringBuffer sb = new StringBuffer(); + sb.append(""); + + response.setContentType("text/html"); + response.setHeader("Cache-Control", "no-cache"); + PrintWriter out = response.getWriter(); + + out.print(sb.toString()); + out.flush(); + out.close(); + + } catch (Exception e) { + log.error(e); + } + } + + protected boolean isAllowFileType(String fileName) { + boolean isAllow = false; + if (allowFileTypeArr != null && allowFileTypeArr.length > 0) { + for (String allowFileType : allowFileTypeArr) { + if (StringUtils.equalsIgnoreCase(allowFileType, StringUtils.substringAfterLast(fileName, "."))) { + isAllow = true; + break; + } + } + } else { + isAllow = true; + } + + return isAllow; + } +} diff --git a/src/main/java/kcg/imis/cmmn/ckeditor/DefaultFileSaveManager.java b/src/main/java/kcg/imis/cmmn/ckeditor/DefaultFileSaveManager.java new file mode 100644 index 0000000..20c5ae9 --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/ckeditor/DefaultFileSaveManager.java @@ -0,0 +1,94 @@ +/* + * CKEditor image upload module for Java. + * Copyright guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + * + * @author guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + */ +package kcg.imis.cmmn.ckeditor; + +import java.io.File; +import java.io.IOException; + +import org.apache.commons.fileupload.FileItem; +import org.apache.commons.io.FileUtils; +import org.apache.commons.io.FilenameUtils; +import org.apache.commons.lang3.RandomStringUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.web.multipart.MultipartFile; + +/** + * Created by guava on 1/20/14. + * 이미지 저장 처리 클래스 + * @author guavatak + * @since 2014.12.04 + * @version 1.0 + * @see + * + *
+ * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2014.12.04 표준프레임워크 최초 적용 (패키지 변경 및 소스 정리) + *+ */ +public class DefaultFileSaveManager implements FileSaveManager { + + @Override + public String saveFile(FileItem fileItem, String imageBaseDir, String imageDomain) { + String originalFileName = FilenameUtils.getName(fileItem.getName()); + String relUrl; + // filename + String subDir = File.separator + DirectoryPathManager.getDirectoryPathByDateType(DirectoryPathManager.DIR_DATE_TYPE.DATE_POLICY_YYYY_MM); + String fileName = RandomStringUtils.randomAlphanumeric(20) + "." + StringUtils.lowerCase(StringUtils.substringAfterLast(originalFileName, ".")); + + File newFile = new File(imageBaseDir + subDir + fileName); + File fileToSave = DirectoryPathManager.getUniqueFile(newFile.getAbsoluteFile()); + + try { + FileUtils.writeByteArrayToFile(fileToSave, fileItem.get()); + } catch (IOException e) { + e.printStackTrace(); + } + + String savedFileName = FilenameUtils.getName(fileToSave.getAbsolutePath()); + relUrl = StringUtils.replace(subDir, "\\", "/") + savedFileName; + + return imageDomain + relUrl; + } + + @Override + public String saveFile(final MultipartFile file, final String imageBaseDir, final String imageDomain) { + String originalFileName = FilenameUtils.getName(file.getOriginalFilename()); + String relUrl; + // filename + String subDir = File.separator + DirectoryPathManager.getDirectoryPathByDateType(DirectoryPathManager.DIR_DATE_TYPE.DATE_POLICY_YYYY_MM); + String fileName = RandomStringUtils.randomAlphanumeric(20) + "." + StringUtils.lowerCase(StringUtils.substringAfterLast(originalFileName, ".")); + + File newFile = new File(imageBaseDir + subDir + fileName); + File fileToSave = DirectoryPathManager.getUniqueFile(newFile.getAbsoluteFile()); + + try { + FileUtils.writeByteArrayToFile(fileToSave, file.getBytes()); + } catch (IOException e) { + e.printStackTrace(); + } + + String savedFileName = FilenameUtils.getName(fileToSave.getAbsolutePath()); + relUrl = StringUtils.replace(subDir, "\\", "/") + savedFileName; + + return imageDomain + relUrl; + } +} diff --git a/src/main/java/kcg/imis/cmmn/ckeditor/DirectoryPathManager.java b/src/main/java/kcg/imis/cmmn/ckeditor/DirectoryPathManager.java new file mode 100644 index 0000000..c9e071c --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/ckeditor/DirectoryPathManager.java @@ -0,0 +1,83 @@ +/* + * CKEditor image upload module for Java. + * Copyright guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + * + * @author guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + */ +package kcg.imis.cmmn.ckeditor; + +import java.io.File; +import java.util.Calendar; + +import org.apache.commons.io.FilenameUtils; +import org.apache.commons.lang3.StringUtils; + +/** + * 이미지 저장 처리 클래스 + * @author guavatak + * @since 2014.12.04 + * @version 1.0 + * @see + * + *
+ * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2014.12.04 표준프레임워크 최초 적용 (패키지 변경 및 소스 정리) + *+ */ +public class DirectoryPathManager { + public enum DIR_DATE_TYPE { + DATE_POLICY_YYYY_MM_DD, DATE_POLICY_YYYY_MM, DATE_POLICY_YYYY + }; + + /** + * 2012/12/22/ + * @param dateType + * @return + * @throws InvalidArgumentException + */ + public static String getDirectoryPathByDateType(DIR_DATE_TYPE policy) { + + Calendar calendar = Calendar.getInstance(); + StringBuffer sb = new StringBuffer(); + sb.append(calendar.get(Calendar.YEAR)).append(File.separator); + if (policy.ordinal() <= DIR_DATE_TYPE.DATE_POLICY_YYYY_MM.ordinal()) { + sb.append(StringUtils.leftPad(String.valueOf(calendar.get(Calendar.MONTH)), 2, '0')).append(File.separator); + } + if (policy.ordinal() <= DIR_DATE_TYPE.DATE_POLICY_YYYY_MM_DD.ordinal()) { + sb.append(StringUtils.leftPad(String.valueOf(calendar.get(Calendar.DATE)), 2, '0')).append(File.separator); + } + + return sb.toString(); + } + + public static File getUniqueFile(final File file) { + if (!file.exists()) + return file; + + File tmpFile = new File(file.getAbsolutePath()); + File parentDir = tmpFile.getParentFile(); + int count = 1; + String extension = FilenameUtils.getExtension(tmpFile.getName()); + String baseName = FilenameUtils.getBaseName(tmpFile.getName()); + do { + tmpFile = new File(parentDir, baseName + "_" + count++ + "_." + extension); + } while (tmpFile.exists()); + return tmpFile; + } + +} diff --git a/src/main/java/kcg/imis/cmmn/ckeditor/FileSaveManager.java b/src/main/java/kcg/imis/cmmn/ckeditor/FileSaveManager.java new file mode 100644 index 0000000..e6d98f1 --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/ckeditor/FileSaveManager.java @@ -0,0 +1,63 @@ +/* + * CKEditor image upload module for Java. + * Copyright guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + * + * @author guavatak (https://github.com/guavatak/ckeditor-upload-filter-java) + */ +package kcg.imis.cmmn.ckeditor; + +import org.apache.commons.fileupload.FileItem; +import org.springframework.web.multipart.MultipartFile; + +/** + * Created by guava on 1/20/14. + * 이미지 저장 처리 클래스 + * @author guavatak + * @since 2014.12.04 + * @version 1.0 + * @see + * + *
+ * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2014.12.04 표준프레임워크 최초 적용 (패키지 변경 및 소스 정리) + *+ */ +public interface FileSaveManager { + /** + * + * @param fileItem FileItem 객체 + * @param imageBaseDir 기본 이미지 저장 디렉토리. 이 디렉토리 아래로 모든 파일을 넣어도 되고, 폴더를 구분하여 넣어도 된다. 이 파라미터에는 마지막 디렉토리 구분자는 포함되지 않는다. + * @param imageDomain 이미지 태그에 들어갈 기본이 되는 URL. + * "http://image.my.com" 과 같은 도메인이 들어갈 수도 있고, "/ckimage" 같은 상대 경로가 들어갈 수도 있다. + * 이 파라미터는 생략해도 된다. + * @return 이미지 파일을 액세스 할 수 있는 URL 을 반환한다. 반환된 URL 은 ckeditor 에게 전달되어 즉시 사용자 브라우져에 이미지가 나타나게 된다. + */ + String saveFile(FileItem fileItem, String imageBaseDir, String imageDomain); + + /** + * + * @param file MultipartFile 객체 + * @param imageBaseDir 기본 이미지 저장 디렉토리. 이 디렉토리 아래로 모든 파일을 넣어도 되고, 폴더를 구분하여 넣어도 된다. 이 파라미터에는 마지막 디렉토리 구분자는 포함되지 않는다. + * @param imageDomain 이미지 태그에 들어갈 기본이 되는 URL. + * "http://image.my.com" 과 같은 도메인이 들어갈 수도 있고, "/ckimage" 같은 상대 경로가 들어갈 수도 있다. + * 이 파라미터는 생략해도 된다. + * @return 이미지 파일을 액세스 할 수 있는 URL 을 반환한다. 반환된 URL 은 ckeditor 에게 전달되어 즉시 사용자 브라우져에 이미지가 나타나게 된다. + */ + String saveFile(MultipartFile file, String imageBaseDir, String imageDomain); +} + diff --git a/src/main/java/kcg/imis/cmmn/egov/EgovBasicLogger.java b/src/main/java/kcg/imis/cmmn/egov/EgovBasicLogger.java new file mode 100644 index 0000000..c432e6c --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/egov/EgovBasicLogger.java @@ -0,0 +1,83 @@ +package kcg.imis.cmmn.egov; + +import java.util.logging.Level; +import java.util.logging.Logger; + +/** + * Utility class to support to logging information + * @author Vincent Han + * @since 2014.09.18 + * @version 1.0 + * @see + * + *
+ * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2014.09.18 표준프레임워크센터 최초 생성 + * + *+ */ +public class EgovBasicLogger { + private static final Level IGNORE_INFO_LEVEL = Level.OFF; + private static final Level DEBUG_INFO_LEVEL = Level.FINEST; + private static final Level INFO_INFO_LEVEL = Level.INFO; + + private static final Logger ignoreLogger = Logger.getLogger("ignore"); + private static final Logger debugLogger = Logger.getLogger("debug"); + private static final Logger infoLogger = Logger.getLogger("info"); + + /** + * 기록이나 처리가 불필요한 경우 사용. + * @param message + * @param exception + */ + public static void ignore(String message, Exception exception) { + if (exception == null) { + ignoreLogger.log(IGNORE_INFO_LEVEL, message); + } else { + ignoreLogger.log(IGNORE_INFO_LEVEL, message, exception); + } + } + + /** + * 기록이나 처리가 불필요한 경우 사용. + * @param message + * @param exception + */ + public static void ignore(String message) { + ignore(message, null); + } + + /** + * 디버그 정보를 기록하는 경우 사용. + * @param message + * @param exception + */ + public static void debug(String message, Exception exception) { + if (exception == null) { + debugLogger.log(DEBUG_INFO_LEVEL, message); + } else { + debugLogger.log(DEBUG_INFO_LEVEL, message, exception); + } + } + + /** + * 디버그 정보를 기록하는 경우 사용. + * @param message + * @param exception + */ + public static void debug(String message) { + debug(message, null); + } + + /** + * 일반적이 정보를 기록하는 경우 사용. + * @param message + * @param exception + */ + public static void info(String message) { + infoLogger.log(INFO_INFO_LEVEL, message); + } +} diff --git a/src/main/java/kcg/imis/cmmn/egov/EgovProperties.java b/src/main/java/kcg/imis/cmmn/egov/EgovProperties.java new file mode 100644 index 0000000..c404e22 --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/egov/EgovProperties.java @@ -0,0 +1,220 @@ +package kcg.imis.cmmn.egov; + +import java.io.BufferedInputStream; +import java.io.File; +import java.io.FileInputStream; +import java.io.FileNotFoundException; +import java.io.IOException; +import java.util.ArrayList; +import java.util.Enumeration; +import java.util.HashMap; +import java.util.Map; +import java.util.Properties; + +import kcg.imis.cmmn.egov.util.EgovWebUtil; + +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +/** + * Class Name : EgovProperties.java + * Description : properties값들을 파일로부터 읽어와 Globals클래스의 정적변수로 로드시켜주는 클래스로 + * 문자열 정보 기준으로 사용할 전역변수를 시스템 재시작으로 반영할 수 있도록 한다. + * Modification Information + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2009.01.19 박지욱 최초 생성 + * 2011.07.20 서준식 Globals파일의 상대경로를 읽은 메서드 추가 + * 2014.10.13 이기하 Globals.properties 값이 null일 경우 오류처리 + * 2016.09.22 임새미 폴더 path값 변경 + * @author 공통 서비스 개발팀 박지욱 + * @since 2009. 01. 19 + * @version 1.0 + * @see + * + */ + +public class EgovProperties { + + private static final Logger LOGGER = LoggerFactory.getLogger(EgovProperties.class); + + //파일구분자 + final static String FILE_SEPARATOR = System.getProperty("file.separator"); + + //프로퍼티 파일의 물리적 위치 + //public static final String GLOBALS_PROPERTIES_FILE = System.getProperty("user.home") + FILE_SEPARATOR + "egovProps" +FILE_SEPARATOR + "globals.properties"; + + //public static final String RELATIVE_PATH_PREFIX = EgovProperties.class.getResource("").getPath() + FILE_SEPARATOR+ ".." + FILE_SEPARATOR + ".." + FILE_SEPARATOR; + + public static final String RELATIVE_PATH_PREFIX = EgovProperties.class.getResource("").getPath().substring(0, EgovProperties.class.getResource("").getPath().lastIndexOf("kcg")); + + public static final String GLOBALS_PROPERTIES_FILE = RELATIVE_PATH_PREFIX + "property" + FILE_SEPARATOR + "globals.properties"; + + /** + * 인자로 주어진 문자열을 Key값으로 하는 상대경로 프로퍼티 값을 절대경로로 반환한다(Globals.java 전용) + * @param keyName String + * @return String + */ + public static String getPathProperty(String keyName) { + String value = ""; + + LOGGER.debug("getPathProperty : {} = {}", GLOBALS_PROPERTIES_FILE, keyName); + + FileInputStream fis = null; + try { + Properties props = new Properties(); + + fis = new FileInputStream(EgovWebUtil.filePathBlackList(GLOBALS_PROPERTIES_FILE)); + props.load(new BufferedInputStream(fis)); + + value = props.getProperty(keyName).trim(); + value = RELATIVE_PATH_PREFIX + "property" + System.getProperty("file.separator") + value; + } catch (FileNotFoundException fne) { + LOGGER.debug("Property file not found.", fne); + throw new RuntimeException("Property file not found", fne); + } catch (IOException ioe) { + LOGGER.debug("Property file IO exception", ioe); + throw new RuntimeException("Property file IO exception", ioe); + } finally { + EgovResourceCloseHelper.close(fis); + } + + return value; + } + + /** + * 인자로 주어진 문자열을 Key값으로 하는 프로퍼티 값을 반환한다(Globals.java 전용) + * @param keyName String + * @return String + */ + public static String getProperty(String keyName) { + String value = ""; + + LOGGER.debug("getProperty : {} = {}", GLOBALS_PROPERTIES_FILE, keyName); + + FileInputStream fis = null; + try { + Properties props = new Properties(); + + fis = new FileInputStream(EgovWebUtil.filePathBlackList(GLOBALS_PROPERTIES_FILE)); + + props.load(new BufferedInputStream(fis)); + if (props.getProperty(keyName) == null) { + return ""; + } + value = props.getProperty(keyName).trim(); + } catch (FileNotFoundException fne) { + LOGGER.debug("Property file not found.", fne); + throw new RuntimeException("Property file not found", fne); + } catch (IOException ioe) { + LOGGER.debug("Property file IO exception", ioe); + throw new RuntimeException("Property file IO exception", ioe); + } finally { + EgovResourceCloseHelper.close(fis); + } + + return value; + } + + /** + * 주어진 파일에서 인자로 주어진 문자열을 Key값으로 하는 프로퍼티 상대 경로값을 절대 경로값으로 반환한다 + * @param fileName String + * @param key String + * @return String + */ + public static String getPathProperty(String fileName, String key) { + FileInputStream fis = null; + try { + Properties props = new Properties(); + + fis = new FileInputStream(EgovWebUtil.filePathBlackList(fileName)); + props.load(new BufferedInputStream(fis)); + fis.close(); + + String value = props.getProperty(key); + value = RELATIVE_PATH_PREFIX + "property" + System.getProperty("file.separator") + value; + + return value; + } catch (FileNotFoundException fne) { + LOGGER.debug("Property file not found.", fne); + throw new RuntimeException("Property file not found", fne); + } catch (IOException ioe) { + LOGGER.debug("Property file IO exception", ioe); + throw new RuntimeException("Property file IO exception", ioe); + } finally { + EgovResourceCloseHelper.close(fis); + } + } + + /** + * 주어진 파일에서 인자로 주어진 문자열을 Key값으로 하는 프로퍼티 값을 반환한다 + * @param fileName String + * @param key String + * @return String + */ + public static String getProperty(String fileName, String key) { + FileInputStream fis = null; + try { + Properties props = new Properties(); + + fis = new FileInputStream(EgovWebUtil.filePathBlackList(fileName)); + props.load(new BufferedInputStream(fis)); + fis.close(); + + String value = props.getProperty(key); + + return value; + } catch (FileNotFoundException fne) { + LOGGER.debug("Property file not found.", fne); + throw new RuntimeException("Property file not found", fne); + } catch (IOException ioe) { + LOGGER.debug("Property file IO exception", ioe); + throw new RuntimeException("Property file IO exception", ioe); + } finally { + EgovResourceCloseHelper.close(fis); + } + } + + /** + * 주어진 프로파일의 내용을 파싱하여 (key-value) 형태의 구조체 배열을 반환한다. + * @param property String + * @return ArrayList + */ + public static ArrayList
+ * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2014.09.18 표준프레임워크센터 최초 생성 + * + *+ */ +public class EgovResourceCloseHelper { + /** + * Resource close 처리. + * @param resources + */ + public static void close(Closeable ... resources) { + for (Closeable resource : resources) { + if (resource != null) { + try { + resource.close(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to close resource is ingored!!"); + } + } + } + } + + /** + * JDBC 관련 resource 객체 close 처리 + * @param objects + */ + public static void closeDBObjects(Wrapper ... objects) { + for (Object object : objects) { + if (object != null) { + if (object instanceof ResultSet) { + try { + ((ResultSet)object).close(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to close resource is ingored!!"); + } + } else if (object instanceof Statement) { + try { + ((Statement)object).close(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to close resource is ingored!!"); + } + } else if (object instanceof Connection) { + try { + ((Connection)object).close(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to close resource is ingored!!"); + } + } else { + throw new IllegalArgumentException("Wrapper type is not found : " + object.toString()); + } + } + } + } + + /** + * Socket 관련 resource 객체 close 처리 + * @param objects + */ + public static void closeSocketObjects(Socket socket, ServerSocket server) { + if (socket != null) { + try { + socket.shutdownOutput(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to shutdown ouput is ignored!!"); + } + + try { + socket.close(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to close resource is ignored!!"); + } + } + + if (server != null) { + try { + server.close(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to close resource is ignored!!"); + } + } + } + + /** + * Socket 관련 resource 객체 close 처리 + * + * @param sockets + */ + public static void closeSockets(Socket ... sockets) { + for (Socket socket : sockets) { + if (socket != null) { + try { + socket.shutdownOutput(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to shutdown ouput is ignored!!"); + } + + try { + socket.close(); + } catch (Exception ignore) { + EgovBasicLogger.ignore("Occurred Exception to close resource is ignored!!"); + } + } + } + } +} \ No newline at end of file diff --git a/src/main/java/kcg/imis/cmmn/egov/file/EgovFileMngUtil.java b/src/main/java/kcg/imis/cmmn/egov/file/EgovFileMngUtil.java new file mode 100644 index 0000000..c3e659b --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/egov/file/EgovFileMngUtil.java @@ -0,0 +1,570 @@ + +package kcg.imis.cmmn.egov.file; + +import java.io.BufferedInputStream; +import java.io.BufferedOutputStream; +import java.io.File; +import java.io.FileInputStream; +import java.io.FileNotFoundException; +import java.io.FileOutputStream; +import java.io.IOException; +import java.io.InputStream; +import java.io.OutputStream; +import java.util.ArrayList; +import java.util.Iterator; +import java.util.List; +import java.util.Map; +import java.util.Map.Entry; + +import javax.annotation.Resource; +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; + +import kcg.imis.cmmn.CommConstants; +import kcg.imis.cmmn.egov.util.EgovStringUtil; +import kcg.imis.cmmn.egov.util.EgovWebUtil; +import kcg.imis.cmmn.egov.vo.FileVO; + +import org.apache.commons.io.FilenameUtils; +import org.apache.commons.lang3.StringUtils; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; +import org.springframework.stereotype.Component; +import org.springframework.util.FileCopyUtils; +import org.springframework.web.multipart.MultipartFile; + +import egovframework.rte.fdl.property.EgovPropertyService; + +/** + * @Class Name : EgovFileMngUtil.java + * @Description : 메시지 처리 관련 유틸리티 + * @Modification Information + * + * 수정일 수정자 수정내용 ------- -------- --------------------------- + * 2009.02.13 이삼섭 최초 생성 2011.08.31 JJY 경량환경 템플릿 커스터마이징버전 생성 + * 2016.09.22 임새미 라인 83~85, 126~136 2016.10.21 하영지 동적으로 폴더를 생성하는 + * 경우가 있어서 폴더명 파라미터 추가parseFileInf Override, deleteFile Override + * + * @author 공통 서비스 개발팀 이삼섭 + * @since 2009. 02. 13 + * @version 1.0 + * @see + * + */ +@Component("EgovFileMngUtil") +public class EgovFileMngUtil { + + public static final int BUFF_SIZE = 2048; + + @Resource(name = "propertiesService") + protected EgovPropertyService propertyService; + + private static final Logger LOGGER = LoggerFactory.getLogger(EgovFileMngUtil.class); + + /** + * 파일이 존재하면 규칙에 의해 파일명을 수정한다. + *
+ * 규칙 : {파일명}_{숫자}.{확장자}
+ *
+ * @param filePath 파일경로
+ * @param fileNameExt (확장자를 포함한) 파일명
+ * @return 파일명
+ */
+ public String makeNewFileName(final String filePath, final String fileNameExt) {
+ int idx = 0;
+ String fileExt = "";
+ String fileName = "";
+ String newFileName = "";
+ String filePathName = filePath + fileNameExt;
+ String newFileNameExt = fileNameExt;
+
+ if (!StringUtils.isBlank(filePathName)) {
+ fileExt = FilenameUtils.getExtension(fileNameExt);
+ fileName = FilenameUtils.getName(fileNameExt);
+ fileName = FilenameUtils.removeExtension(fileName);
+ newFileName = fileName;
+ while (true) {
+ File f = new File(filePathName);
+ if (f.isFile()) {
+ newFileName = String.format("%s_%d", fileName, ++idx);
+ filePathName = String.format("%s%s.%s", filePath, newFileName, fileExt);
+ } else {
+ break;
+ }
+ }
+
+ newFileNameExt = newFileName;
+ if (!StringUtils.isBlank(fileExt)) {
+ newFileNameExt += "." + fileExt;
+ }
+
+ }
+
+ return newFileNameExt;
+ }
+
+ /**
+ * 파일을 저장하고 저장된 파일정보 목록을 취득한다.
+ * @param files 파일객체
+ * @param keyStr 구분 값
+ * @param fileKeyParam 파일순번
+ * @param atchFileId 파일ID
+ * @param storePath 저장경로
+ * @return 저장된 파일정보 List
+ * @throws Exception 기본 예외 처리
+ */
+ public List+ * Comment : 파일을 삭제한다. + *+ * @param savedFile 삭제할 파일명 + * @param storePath 파일위치 + * @return 성공하면 삭제된 파일의 절대경로, 아니면블랭크 + */ + public String deleteFile(final String savedFile, final String storePath) { + if (StringUtils.isBlank(savedFile)) { + return ""; + } + + String storePathString = ""; + if (StringUtils.isBlank(storePath)) { + storePathString = propertyService.getString("Globals.fileStorePath"); + } else { + storePathString = propertyService.getString(storePath); + } + String fileDeletePath = storePathString + File.separator + savedFile; + // 인자값 유효하지 않은 경우 블랭크 리턴 + if (fileDeletePath == null || fileDeletePath.equals("")) { + return ""; + } + String result = ""; + File file = new File(EgovWebUtil.filePathBlackList(fileDeletePath)); + if (file.isFile()) { + result = deletePath(file); + } else { + result = ""; + } + + return result; + } + + private String deletePath(File file) { + String result = ""; + if (file.exists()) { + result = file.getAbsolutePath(); + if (!file.delete()) { + result = ""; + } + } + return result; + } + + /** + * 파일을 저장하고 저장된 파일정보 목록을 취득한다. + * @param files 파일객체 + * @param keyStr 구분 값 + * @param fileKeyParam 파일순번 + * @param atchFileId 파일ID + * @param storePath저장경로 + * @param folderNm 폴더명 + * @return 저장된 파일정보 List + * @throws Exception 기본 예외 처리 + */ + public List
+ * Comment : 파일을 삭제한다. + *+ * + * @param savedFile + * 삭제할 파일명 + * @param storePath + * 루트 디렉토리 + * @param folderNm + * 폴더명 + * @return 성공하면 삭제된 파일의 절대경로, 아니면블랭크 + */ + public String deleteFile(final String savedFile, final String storePath, final String folderNm) { + if (StringUtils.isBlank(savedFile)) { + return ""; + } + + String storePathString = ""; + if (StringUtils.isBlank(storePath)) { + storePathString = propertyService.getString("Globals.fileStorePath"); + } else { + storePathString = propertyService.getString(storePath); + } + + String fileDeletePath = storePathString + File.separator + folderNm + File.separator + savedFile; + // 인자값 유효하지 않은 경우 블랭크 리턴 + if (fileDeletePath == null || fileDeletePath.equals("")) { + return ""; + } + String result = ""; + File file = new File(EgovWebUtil.filePathBlackList(fileDeletePath)); + if (file.isFile()) { + result = deletePath(file); + } else { + result = ""; + } + + return result; + } + +} diff --git a/src/main/java/kcg/imis/cmmn/egov/file/EgovFileUploadUtil.java b/src/main/java/kcg/imis/cmmn/egov/file/EgovFileUploadUtil.java new file mode 100644 index 0000000..48e2a94 --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/egov/file/EgovFileUploadUtil.java @@ -0,0 +1,86 @@ +package kcg.imis.cmmn.egov.file; + +import java.io.File; +import java.io.InputStream; +import java.util.ArrayList; +import java.util.Iterator; +import java.util.List; + +import javax.servlet.http.HttpServletRequest; + +import kcg.imis.cmmn.egov.file.EgovFormBasedFileUtil; +import kcg.imis.cmmn.egov.file.EgovFormBasedFileVo; +import kcg.imis.cmmn.egov.util.EgovWebUtil; + +import org.springframework.web.multipart.MultipartFile; +import org.springframework.web.multipart.MultipartHttpServletRequest; + +/** + * @Class Name : EgovFileUploadUtil.java + * @Description : Spring 기반 File Upload 유틸리티 + * @Modification Information + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2009.08.26 한성곤 최초 생성 + * + * @author 공통컴포넌트 개발팀 한성곤 + * @since 2009.08.26 + * @version 1.0 + * @see + */ +public class EgovFileUploadUtil extends EgovFormBasedFileUtil { + /** + * 파일을 Upload 처리한다. + * + * @param request + * @param where + * @param maxFileSize + * @return + * @throws Exception + */ + public static List
+ * There exist different variants of these global identifiers. The methods of + * this class are for manipulating the Leach-Salz variant, although the + * constructors allow the creation of any variant of UUID (described below). + * + *
+ * The layout of a variant 2 (Leach-Salz) UUID is as follows: + * + * The most significant long consists of the following unsigned fields: + * + *
+ * 0xFFFFFFFF00000000 time_low + * 0x00000000FFFF0000 time_mid + * 0x000000000000F000 version + * 0x0000000000000FFF time_hi + *+ * + * The least significant long consists of the following unsigned fields: + * + *
+ * 0xC000000000000000 variant + * 0x3FFF000000000000 clock_seq + * 0x0000FFFFFFFFFFFF node + *+ * + *
+ * The variant field contains a value which identifies the layout of the + * UUID. The bit layout described above is valid only for a + * UUID with a variant value of 2, which indicates the Leach-Salz + * variant. + * + *
+ * The version field holds a value that describes the type of this UUID. + * There are four different basic types of UUIDs: time-based, DCE security, + * name-based, and randomly generated UUIDs. These types have a version value of + * 1, 2, 3 and 4, respectively. + * + *
+ * For more information including algorithms used to create UUIDs,
+ * see the Internet-Draft UUIDs
+ * and GUIDs or the standards body definition at ISO/IEC 11578:1996.
+ *
+ * @version 1.14, 07/12/04
+ * @since 1.5
+ */
+@SuppressWarnings("serial")
+public class EgovFormBasedUUID implements Serializable {
+ /*
+ * The most significant 64 bits of this UUID.
+ *
+ * @serial
+ */
+ private final long mostSigBits;
+
+ /*
+ * The least significant 64 bits of this UUID.
+ *
+ * @serial
+ */
+ private final long leastSigBits;
+
+ /*
+ * The version number associated with this UUID. Computed on demand.
+ */
+ private transient int version = -1;
+
+ /*
+ * The variant number associated with this UUID. Computed on demand.
+ */
+ private transient int variant = -1;
+
+ /*
+ * The timestamp associated with this UUID. Computed on demand.
+ */
+ private transient volatile long timestamp = -1;
+
+ /*
+ * The clock sequence associated with this UUID. Computed on demand.
+ */
+ private transient int sequence = -1;
+
+ /*
+ * The node number associated with this UUID. Computed on demand.
+ */
+ private transient long node = -1;
+
+ /*
+ * The hashcode of this UUID. Computed on demand.
+ */
+ private transient int hashCode = -1;
+
+ /*
+ * The random number generator used by this class to create random based
+ * UUIDs.
+ */
+ private static volatile SecureRandom numberGenerator = null;
+
+ // Constructors and Factories
+
+ /*
+ * Private constructor which uses a byte array to construct the new UUID.
+ */
+ private EgovFormBasedUUID(byte[] data) {
+ long msb = 0;
+ long lsb = 0;
+ for (int i = 0; i < 8; i++)
+ msb = (msb << 8) | (data[i] & 0xff);
+ for (int i = 8; i < 16; i++)
+ lsb = (lsb << 8) | (data[i] & 0xff);
+ this.mostSigBits = msb;
+ this.leastSigBits = lsb;
+ }
+
+ /**
+ * Constructs a new UUID using the specified data.
+ * mostSigBits is used for the most significant 64 bits of the
+ * UUID and leastSigBits becomes the least significant
+ * 64 bits of the UUID.
+ *
+ * @param mostSigBits
+ * @param leastSigBits
+ */
+ public EgovFormBasedUUID(long mostSigBits, long leastSigBits) {
+ this.mostSigBits = mostSigBits;
+ this.leastSigBits = leastSigBits;
+ }
+
+ /**
+ * Static factory to retrieve a type 4 (pseudo randomly generated) UUID.
+ *
+ * The UUID is generated using a cryptographically strong
+ * pseudo random number generator.
+ *
+ * @return a randomly generated UUID.
+ */
+ public static EgovFormBasedUUID randomUUID() {
+ SecureRandom ng = numberGenerator;
+ if (ng == null) {
+ numberGenerator = ng = new SecureRandom();
+ }
+
+ byte[] randomBytes = new byte[16];
+ ng.nextBytes(randomBytes);
+ randomBytes[6] &= 0x0f; /* clear version */
+ randomBytes[6] |= 0x40; /* set to version 4 */
+ randomBytes[8] &= 0x3f; /* clear variant */
+ randomBytes[8] |= 0x80; /* set to IETF variant */
+
+ return new EgovFormBasedUUID(randomBytes);
+ }
+
+ /**
+ * Static factory to retrieve a type 3 (name based) UUID based on
+ * the specified byte array.
+ *
+ * @param name
+ * a byte array to be used to construct a UUID.
+ * @return a UUID generated from the specified array.
+ */
+ public static EgovFormBasedUUID nameUUIDFromBytes(byte[] name) {
+ return null;
+
+/*
+ * 2106.11.18 김노민
+ * FindBugs에서 Array index is out of bounds. 문제를 제시한다.
+ * 어차피 사용하지 않으니 해당 메소드를 수정하지 않고 모두 주석처리한다.
+ *
+ *
+ MessageDigest md;
+ try {
+ // 2011.10.10 보안점검 후속조치 암호화 알고리즘 변경(MD5 -> SHA-256)
+ //md = MessageDigest.getInstance("MD5");
+ md = MessageDigest.getInstance("SHA-256");
+ } catch (NoSuchAlgorithmException nsae) {
+ //throw new InternalError("MD5 not supported");
+ throw new InternalError("SHA-256 not supported");
+ }
+ // 2011.10.10 보안점검 후속조치
+ if (md == null) {
+ throw new RuntimeException("MessageDigest is null!!");
+ }
+ // 2014.09.20 보안점검 후속 조치
+ // Random 방식의 salt 추가
+ SecureRandom ng = new SecureRandom();
+ byte[] randomBytes = new byte[16];
+ ng.nextBytes(randomBytes);
+
+ md.reset();
+ md.update(randomBytes);
+ byte[] sha = md.digest(name);
+
+
+ byte[] md5Bytes = new byte[8];
+ System.arraycopy(sha, 0, md5Bytes, 0, 8);
+ //2011.10.10 보안점검 후속조치 끝
+
+ md5Bytes[6] &= 0x0f; clear version
+ md5Bytes[6] |= 0x30; set to version 3
+ md5Bytes[8] &= 0x3f; clear variant
+ md5Bytes[8] |= 0x80; set to IETF variant
+
+ return new EgovFormBasedUUID(md5Bytes);*/
+ }
+
+ /**
+ * Creates a UUID from the string standard representation as
+ * described in the {@link #toString} method.
+ *
+ * @param name
+ * a string that specifies a UUID.
+ * @return a UUID with the specified value.
+ * @throws IllegalArgumentException
+ * if name does not conform to the string representation as
+ * described in {@link #toString}.
+ */
+ public static EgovFormBasedUUID fromString(String name) {
+ String[] components = name.split("-");
+ if (components.length != 5)
+ throw new IllegalArgumentException("Invalid UUID string: " + name);
+ for (int i = 0; i < 5; i++)
+ components[i] = "0x" + components[i];
+
+ long mostSigBits = Long.decode(components[0]).longValue();
+ mostSigBits <<= 16;
+ mostSigBits |= Long.decode(components[1]).longValue();
+ mostSigBits <<= 16;
+ mostSigBits |= Long.decode(components[2]).longValue();
+
+ long leastSigBits = Long.decode(components[3]).longValue();
+ leastSigBits <<= 48;
+ leastSigBits |= Long.decode(components[4]).longValue();
+
+ return new EgovFormBasedUUID(mostSigBits, leastSigBits);
+ }
+
+ // Field Accessor Methods
+
+ /**
+ * Returns the least significant 64 bits of this UUID's 128 bit value.
+ *
+ * @return the least significant 64 bits of this UUID's 128 bit value.
+ */
+ public long getLeastSignificantBits() {
+ return leastSigBits;
+ }
+
+ /**
+ * Returns the most significant 64 bits of this UUID's 128 bit value.
+ *
+ * @return the most significant 64 bits of this UUID's 128 bit value.
+ */
+ public long getMostSignificantBits() {
+ return mostSigBits;
+ }
+
+ /**
+ * The version number associated with this UUID. The version
+ * number describes how this UUID was generated.
+ *
+ * The version number has the following meaning:
+ *
+ *
+ *
+ * The 60 bit timestamp value is constructed from the time_low, time_mid, + * and time_hi fields of this UUID. The resulting timestamp is + * measured in 100-nanosecond units since midnight, October 15, 1582 UTC. + *
+ * + * The timestamp value is only meaningful in a time-based UUID, which has + * version type 1. If this UUID is not a time-based UUID then + * this method throws UnsupportedOperationException. + * + * @throws UnsupportedOperationException + * if this UUID is not a version 1 UUID. + */ + public long timestamp() { + if (version() != 1) { + throw new UnsupportedOperationException("Not a time-based UUID"); + } + long result = timestamp; + if (result < 0) { + result = (mostSigBits & 0x0000000000000FFFL) << 48; + result |= ((mostSigBits >> 16) & 0xFFFFL) << 32; + result |= mostSigBits >>> 32; + timestamp = result; + } + return result; + } + + /** + * The clock sequence value associated with this UUID. + * + *
+ * The 14 bit clock sequence value is constructed from the clock sequence + * field of this UUID. The clock sequence field is used to guarantee + * temporal uniqueness in a time-based UUID. + *
+ * + * The clockSequence value is only meaningful in a time-based UUID, which + * has version type 1. If this UUID is not a time-based UUID then this + * method throws UnsupportedOperationException. + * + * @return the clock sequence of this UUID. + * @throws UnsupportedOperationException + * if this UUID is not a version 1 UUID. + */ + public int clockSequence() { + if (version() != 1) { + throw new UnsupportedOperationException("Not a time-based UUID"); + } + if (sequence < 0) { + sequence = (int) ((leastSigBits & 0x3FFF000000000000L) >>> 48); + } + return sequence; + } + + /** + * The node value associated with this UUID. + * + *
+ * The 48 bit node value is constructed from the node field of this UUID. + * This field is intended to hold the IEEE 802 address of the machine that + * generated this UUID to guarantee spatial uniqueness. + *
+ *
+ * The node value is only meaningful in a time-based UUID, which has version
+ * type 1. If this UUID is not a time-based UUID then this method throws
+ * UnsupportedOperationException.
+ *
+ * @return the node value of this UUID.
+ * @throws UnsupportedOperationException
+ * if this UUID is not a version 1 UUID.
+ */
+ public long node() {
+ if (version() != 1) {
+ throw new UnsupportedOperationException("Not a time-based UUID");
+ }
+ if (node < 0) {
+ node = leastSigBits & 0x0000FFFFFFFFFFFFL;
+ }
+ return node;
+ }
+
+ // Object Inherited Methods
+
+ /**
+ * Returns a String object representing this
+ * UUID.
+ *
+ *
+ * The UUID string representation is as described by this BNF : + * + *
+ * UUID = <time_low> "-" <time_mid> "-" + * <time_high_and_version> "-" + * <variant_and_sequence> "-" + * <node> + * time_low = 4*<hexOctet> + * time_mid = 2*<hexOctet> + * time_high_and_version = 2*<hexOctet> + * variant_and_sequence = 2*<hexOctet> + * node = 6*<hexOctet> + * hexOctet = <hexDigit><hexDigit> + * hexDigit = + * "0" | "1" | "2" | "3" | "4" | "5" | "6" | "7" | "8" | "9" + * | "a" | "b" | "c" | "d" | "e" | "f" + * | "A" | "B" | "C" | "D" | "E" | "F" + *+ * + * @return a string representation of this UUID. + */ + @Override + public String toString() { + return (digits(mostSigBits >> 32, 8) + "-" + + digits(mostSigBits >> 16, 4) + "-" + digits(mostSigBits, 4) + + "-" + digits(leastSigBits >> 48, 4) + "-" + digits( + leastSigBits, 12)); + } + + /** Returns val represented by the specified number of hex digits. */ + private static String digits(long val, int digits) { + long hi = 1L << (digits * 4); + return Long.toHexString(hi | (val & (hi - 1))).substring(1); + } + + /** + * Returns a hash code for this
UUID.
+ *
+ * @return a hash code value for this UUID.
+ */
+ @Override
+ public int hashCode() {
+ if (hashCode == -1) {
+ hashCode = (int) ((mostSigBits >> 32) ^ mostSigBits
+ ^ (leastSigBits >> 32) ^ leastSigBits);
+ }
+ return hashCode;
+ }
+
+ /**
+ * Compares this object to the specified object. The result is true
+ * if and only if the argument is not null, is a UUID
+ * object, has the same variant, and contains the same value, bit for bit,
+ * as this UUID.
+ *
+ * @param obj
+ * the object to compare with.
+ * @return true if the objects are the same;
+ * false otherwise.
+ */
+ @Override
+ public boolean equals(Object obj) {
+ // 보안 취약점 점검 지적사항 반영 시작
+ if (obj == null)
+ return false;
+ // 보안 취약점 점검 지적사항 반영 시작 끝
+ if (!(obj instanceof EgovFormBasedUUID))
+ return false;
+ if (((EgovFormBasedUUID) obj).variant() != this.variant())
+ return false;
+ EgovFormBasedUUID id = (EgovFormBasedUUID) obj;
+ return (mostSigBits == id.mostSigBits && leastSigBits == id.leastSigBits);
+ }
+
+ // Comparison Operations
+
+ /**
+ * Compares this UUID with the specified UUID.
+ *
+ *
+ * The first of two UUIDs follows the second if the most significant field
+ * in which the UUIDs differ is greater for the first UUID.
+ *
+ * @param val
+ * UUID to which this UUID is to be
+ * compared.
+ * @return -1, 0 or 1 as this UUID is less than, equal to, or
+ * greater than val.
+ */
+ public int compareTo(EgovFormBasedUUID val) {
+ // The ordering is intentionally set up so that the UUIDs
+ // can simply be numerically compared as two numbers
+ return (this.mostSigBits < val.mostSigBits ? -1
+ : (this.mostSigBits > val.mostSigBits ? 1
+ : (this.leastSigBits < val.leastSigBits ? -1
+ : (this.leastSigBits > val.leastSigBits ? 1 : 0))));
+ }
+
+ /**
+ * Reconstitute the UUID instance from a stream (that is,
+ * deserialize it). This is necessary to set the transient fields to their
+ * correct uninitialized value so they will be recomputed on demand.
+ */
+ private void readObject(java.io.ObjectInputStream in)
+ throws java.io.IOException, ClassNotFoundException {
+
+ in.defaultReadObject();
+
+ // Set "cached computation" fields to their initial values
+ version = -1;
+ variant = -1;
+ timestamp = -1;
+ sequence = -1;
+ node = -1;
+ hashCode = -1;
+ }
+}
\ No newline at end of file
diff --git a/src/main/java/kcg/imis/cmmn/egov/filter/HTMLTagFilter.java b/src/main/java/kcg/imis/cmmn/egov/filter/HTMLTagFilter.java
new file mode 100644
index 0000000..fb804e0
--- /dev/null
+++ b/src/main/java/kcg/imis/cmmn/egov/filter/HTMLTagFilter.java
@@ -0,0 +1,45 @@
+/*
+ * Copyright 2008-2009 MOPAS(Ministry of Public Administration and Security).
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package kcg.imis.cmmn.egov.filter;
+
+import java.io.IOException;
+
+import javax.servlet.Filter;
+import javax.servlet.FilterChain;
+import javax.servlet.FilterConfig;
+import javax.servlet.ServletException;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+public class HTMLTagFilter implements Filter{
+
+ @SuppressWarnings("unused")
+ private FilterConfig config;
+
+ public void doFilter(ServletRequest request, ServletResponse response,
+ FilterChain chain) throws IOException, ServletException {
+
+ chain.doFilter(request, response);
+ }
+
+ public void init(FilterConfig config) throws ServletException {
+ this.config = config;
+ }
+
+ public void destroy() {
+
+ }
+}
diff --git a/src/main/java/kcg/imis/cmmn/egov/filter/HTMLTagFilterRequestWrapper.java b/src/main/java/kcg/imis/cmmn/egov/filter/HTMLTagFilterRequestWrapper.java
new file mode 100644
index 0000000..f3f0567
--- /dev/null
+++ b/src/main/java/kcg/imis/cmmn/egov/filter/HTMLTagFilterRequestWrapper.java
@@ -0,0 +1,109 @@
+/*
+ * Copyright 2008-2009 MOPAS(Ministry of Public Administration and Security).
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package kcg.imis.cmmn.egov.filter;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletRequestWrapper;
+
+public class HTMLTagFilterRequestWrapper extends HttpServletRequestWrapper {
+
+ public HTMLTagFilterRequestWrapper(HttpServletRequest request) {
+ super(request);
+ }
+
+ public String[] getParameterValues(String parameter) {
+
+ String[] values = super.getParameterValues(parameter);
+
+ if(values==null){
+ return null;
+ }
+
+ for (int i = 0; i < values.length; i++) {
+ if (values[i] != null) {
+ StringBuffer strBuff = new StringBuffer();
+ for (int j = 0; j < values[i].length(); j++) {
+ char c = values[i].charAt(j);
+ switch (c) {
+ case '<':
+ strBuff.append("<");
+ break;
+ case '>':
+ strBuff.append(">");
+ break;
+ //case '&':
+ //strBuff.append("&");
+ //break;
+ case '"':
+ strBuff.append(""");
+ break;
+ case '\'':
+ strBuff.append("'");
+ break;
+ default:
+ strBuff.append(c);
+ break;
+ }
+ }
+ values[i] = strBuff.toString();
+ } else {
+ values[i] = null;
+ }
+ }
+
+ return values;
+ }
+
+ public String getParameter(String parameter) {
+
+ String value = super.getParameter(parameter);
+
+ if(value==null){
+ return null;
+ }
+
+ StringBuffer strBuff = new StringBuffer();
+
+ for (int i = 0; i < value.length(); i++) {
+ char c = value.charAt(i);
+ switch (c) {
+ case '<':
+ strBuff.append("<");
+ break;
+ case '>':
+ strBuff.append(">");
+ break;
+ case '&':
+ strBuff.append("&");
+ break;
+ case '"':
+ strBuff.append(""");
+ break;
+ case '\'':
+ strBuff.append("'");
+ break;
+ default:
+ strBuff.append(c);
+ break;
+ }
+ }
+
+ value = strBuff.toString();
+
+ return value;
+ }
+
+}
\ No newline at end of file
diff --git a/src/main/java/kcg/imis/cmmn/egov/filter/RequestBodyXSSFilter.java b/src/main/java/kcg/imis/cmmn/egov/filter/RequestBodyXSSFilter.java
new file mode 100644
index 0000000..592b56b
--- /dev/null
+++ b/src/main/java/kcg/imis/cmmn/egov/filter/RequestBodyXSSFilter.java
@@ -0,0 +1,36 @@
+package kcg.imis.cmmn.egov.filter;
+
+import java.io.IOException;
+
+import javax.servlet.Filter;
+import javax.servlet.FilterChain;
+import javax.servlet.FilterConfig;
+import javax.servlet.ServletException;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+public class RequestBodyXSSFilter implements Filter {
+
+ @Override
+ public void destroy() {}
+ @Override
+ public void init(FilterConfig filterConfig) throws ServletException {
+ // TODO Auto-generated method stub
+
+ }
+ @Override
+ public void doFilter(ServletRequest request, ServletResponse response,
+ FilterChain chain) throws IOException, ServletException {
+ HttpServletRequest req = (HttpServletRequest)request;
+ HttpServletResponse res = (HttpServletResponse)response;
+// RequestWrapper requestWrapper = null;
+ try{
+// requestWrapper = new RequestWrapper(req);
+ }catch(Exception e){
+ e.printStackTrace();
+ }
+ chain.doFilter(req, res);
+ }
+}
diff --git a/src/main/java/kcg/imis/cmmn/egov/util/EgovStringUtil.java b/src/main/java/kcg/imis/cmmn/egov/util/EgovStringUtil.java
new file mode 100644
index 0000000..613f932
--- /dev/null
+++ b/src/main/java/kcg/imis/cmmn/egov/util/EgovStringUtil.java
@@ -0,0 +1,895 @@
+/**
+ * @Class Name : EgovStringUtil.java
+ * @Description : 문자열 데이터 처리 관련 유틸리티
+ * @Modification Information
+ *
+ * 수정일 수정자 수정내용
+ * ------- -------- ---------------------------
+ * 2009.01.13 박정규 최초 생성
+ * 2009.02.13 이삼섭 내용 추가
+ *
+ * @author 공통 서비스 개발팀 박정규
+ * @since 2009. 01. 13
+ * @version 1.0
+ * @see
+ *
+ */
+
+package kcg.imis.cmmn.egov.util;
+
+/*
+ * Copyright 2001-2006 The Apache Software Foundation.
+ *
+ * Licensed under the Apache License, Version 2.0 (the ";License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS"; BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import java.io.UnsupportedEncodingException;
+import java.math.BigDecimal;
+import java.security.SecureRandom;
+import java.sql.Timestamp;
+import java.text.SimpleDateFormat;
+import java.util.Locale;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+public class EgovStringUtil {
+
+ private static final Logger LOGGER = LoggerFactory.getLogger(EgovStringUtil.class);
+
+ /**
+ * 빈 문자열 "".
+ */
+ public static final String EMPTY = "";
+
+ /**
+ *
Padding을 할 수 있는 최대 수치
+ */ + // private static final int PAD_LIMIT = 8192; + /** + *An array of Strings used for padding.
Used for efficient space padding. The length of each String expands as needed.
+ */ + /* + private static final String[] PADDING = new String[Character.MAX_VALUE]; + + static { + // space padding is most common, start with 64 chars + PADDING[32] = " "; + } + */ + + /** + * 문자열이 지정한 길이를 초과했을때 지정한길이에다가 해당 문자열을 붙여주는 메서드. + * @param source 원본 문자열 배열 + * @param output 더할문자열 + * @param slength 지정길이 + * @return 지정길이로 잘라서 더할분자열 합친 문자열 + */ + public static String cutString(String source, String output, int slength) { + String returnVal = null; + if (source != null) { + if (source.length() > slength) { + returnVal = source.substring(0, slength) + output; + } else + returnVal = source; + } + return returnVal; + } + + /** + * 문자열이 지정한 길이를 초과했을때 해당 문자열을 삭제하는 메서드 + * @param source 원본 문자열 배열 + * @param slength 지정길이 + * @return 지정길이로 잘라서 더할분자열 합친 문자열 + */ + public static String cutString(String source, int slength) { + String result = null; + if (source != null) { + if (source.length() > slength) { + result = source.substring(0, slength); + } else + result = source; + } + return result; + } + + /** + *+ * String이 비었거나("") 혹은 null 인지 검증한다. + *
+ * + *
+ * StringUtil.isEmpty(null) = true
+ * StringUtil.isEmpty("") = true
+ * StringUtil.isEmpty(" ") = false
+ * StringUtil.isEmpty("bob") = false
+ * StringUtil.isEmpty(" bob ") = false
+ *
+ *
+ * @param str - 체크 대상 스트링오브젝트이며 null을 허용함
+ * @return true - 입력받은 String 이 빈 문자열 또는 null인 경우
+ */
+ public static boolean isEmpty(String str) {
+ return str == null || str.length() == 0;
+ }
+
+ /**
+ * 기준 문자열에 포함된 모든 대상 문자(char)를 제거한다.
+ * + *
+ * StringUtil.remove(null, *) = null
+ * StringUtil.remove("", *) = ""
+ * StringUtil.remove("queued", 'u') = "qeed"
+ * StringUtil.remove("queued", 'z') = "queued"
+ *
+ *
+ * @param str 입력받는 기준 문자열
+ * @param remove 입력받는 문자열에서 제거할 대상 문자열
+ * @return 제거대상 문자열이 제거된 입력문자열. 입력문자열이 null인 경우 출력문자열은 null
+ */
+ public static String remove(String str, char remove) {
+ if (isEmpty(str) || str.indexOf(remove) == -1) {
+ return str;
+ }
+ char[] chars = str.toCharArray();
+ int pos = 0;
+ for (int i = 0; i < chars.length; i++) {
+ if (chars[i] != remove) {
+ chars[pos++] = chars[i];
+ }
+ }
+ return new String(chars, 0, pos);
+ }
+
+ /**
+ * 문자열 내부의 콤마 character(,)를 모두 제거한다.
+ * + *
+ * StringUtil.removeCommaChar(null) = null
+ * StringUtil.removeCommaChar("") = ""
+ * StringUtil.removeCommaChar("asdfg,qweqe") = "asdfgqweqe"
+ *
+ *
+ * @param str 입력받는 기준 문자열
+ * @return " , "가 제거된 입력문자열
+ * 입력문자열이 null인 경우 출력문자열은 null
+ */
+ public static String removeCommaChar(String str) {
+ return remove(str, ',');
+ }
+
+ /**
+ * 문자열 내부의 마이너스 character(-)를 모두 제거한다.
+ * + *
+ * StringUtil.removeMinusChar(null) = null
+ * StringUtil.removeMinusChar("") = ""
+ * StringUtil.removeMinusChar("a-sdfg-qweqe") = "asdfgqweqe"
+ *
+ *
+ * @param str 입력받는 기준 문자열
+ * @return " - "가 제거된 입력문자열
+ * 입력문자열이 null인 경우 출력문자열은 null
+ */
+ public static String removeMinusChar(String str) {
+ return remove(str, '-');
+ }
+
+ /**
+ * 원본 문자열의 포함된 특정 문자열을 새로운 문자열로 변환하는 메서드
+ * @param source 원본 문자열
+ * @param subject 원본 문자열에 포함된 특정 문자열
+ * @param object 변환할 문자열
+ * @return sb.toString() 새로운 문자열로 변환된 문자열
+ */
+ public static String replace(String source, String subject, String object) {
+ StringBuffer rtnStr = new StringBuffer();
+ String preStr = "";
+ String nextStr = source;
+ String srcStr = source;
+
+ while (srcStr.indexOf(subject) >= 0) {
+ preStr = srcStr.substring(0, srcStr.indexOf(subject));
+ nextStr = srcStr.substring(srcStr.indexOf(subject) + subject.length(), srcStr.length());
+ srcStr = nextStr;
+ rtnStr.append(preStr).append(object);
+ }
+ rtnStr.append(nextStr);
+ return rtnStr.toString();
+ }
+
+ /**
+ * 원본 문자열의 포함된 특정 문자열 첫번째 한개만 새로운 문자열로 변환하는 메서드
+ * @param source 원본 문자열
+ * @param subject 원본 문자열에 포함된 특정 문자열
+ * @param object 변환할 문자열
+ * @return sb.toString() 새로운 문자열로 변환된 문자열 / source 특정문자열이 없는 경우 원본 문자열
+ */
+ public static String replaceOnce(String source, String subject, String object) {
+ StringBuffer rtnStr = new StringBuffer();
+ String preStr = "";
+ String nextStr = source;
+ if (source.indexOf(subject) >= 0) {
+ preStr = source.substring(0, source.indexOf(subject));
+ nextStr = source.substring(source.indexOf(subject) + subject.length(), source.length());
+ rtnStr.append(preStr).append(object).append(nextStr);
+ return rtnStr.toString();
+ } else {
+ return source;
+ }
+ }
+
+ /**
+ * subject에 포함된 각각의 문자를 object로 변환한다.
+ *
+ * @param source 원본 문자열
+ * @param subject 원본 문자열에 포함된 특정 문자열
+ * @param object 변환할 문자열
+ * @return sb.toString() 새로운 문자열로 변환된 문자열
+ */
+ public static String replaceChar(String source, String subject, String object) {
+ StringBuffer rtnStr = new StringBuffer();
+ String preStr = "";
+ String nextStr = source;
+ String srcStr = source;
+
+ char chA;
+
+ for (int i = 0; i < subject.length(); i++) {
+ chA = subject.charAt(i);
+
+ if (srcStr.indexOf(chA) >= 0) {
+ preStr = srcStr.substring(0, srcStr.indexOf(chA));
+ nextStr = srcStr.substring(srcStr.indexOf(chA) + 1, srcStr.length());
+ srcStr = rtnStr.append(preStr).append(object).append(nextStr).toString();
+ }
+ }
+
+ return srcStr;
+ }
+
+ /**
+ * str 중 searchStr의 시작(index) 위치를 반환.
입력값 중 null이 있을 경우 -1을 반환.
+ * StringUtil.indexOf(null, *) = -1
+ * StringUtil.indexOf(*, null) = -1
+ * StringUtil.indexOf("", "") = 0
+ * StringUtil.indexOf("aabaabaa", "a") = 0
+ * StringUtil.indexOf("aabaabaa", "b") = 2
+ * StringUtil.indexOf("aabaabaa", "ab") = 1
+ * StringUtil.indexOf("aabaabaa", "") = 0
+ *
+ *
+ * @param str 검색 문자열
+ * @param searchStr 검색 대상문자열
+ * @return 검색 문자열 중 검색 대상문자열이 있는 시작 위치 검색대상 문자열이 없거나 null인 경우 -1
+ */
+ public static int indexOf(String str, String searchStr) {
+ if (str == null || searchStr == null) {
+ return -1;
+ }
+ return str.indexOf(searchStr);
+ }
+
+ /**
+ * 오라클의 decode 함수와 동일한 기능을 가진 메서드이다.
+ * sourStr과 compareStr의 값이 같으면
+ * returStr을 반환하며, 다르면 defaultStr을 반환한다.
+ *
+ * StringUtil.decode(null, null, "foo", "bar")= "foo"
+ * StringUtil.decode("", null, "foo", "bar") = "bar"
+ * StringUtil.decode(null, "", "foo", "bar") = "bar"
+ * StringUtil.decode("하이", "하이", null, "bar") = null
+ * StringUtil.decode("하이", "하이 ", "foo", null) = null
+ * StringUtil.decode("하이", "하이", "foo", "bar") = "foo"
+ * StringUtil.decode("하이", "하이 ", "foo", "bar") = "bar"
+ *
+ *
+ * @param sourceStr 비교할 문자열
+ * @param compareStr 비교 대상 문자열
+ * @param returnStr sourceStr와 compareStr의 값이 같을 때 반환할 문자열
+ * @param defaultStr sourceStr와 compareStr의 값이 다를 때 반환할 문자열
+ * @return sourceStr과 compareStr의 값이 동일(equal)할 때 returnStr을 반환하며,
+ * 오라클의 decode 함수와 동일한 기능을 가진 메서드이다.
+ * sourStr과 compareStr의 값이 같으면
+ * returStr을 반환하며, 다르면 sourceStr을 반환한다.
+ *
+ * StringUtil.decode(null, null, "foo") = "foo"
+ * StringUtil.decode("", null, "foo") = ""
+ * StringUtil.decode(null, "", "foo") = null
+ * StringUtil.decode("하이", "하이", "foo") = "foo"
+ * StringUtil.decode("하이", "하이 ", "foo") = "하이"
+ * StringUtil.decode("하이", "바이", "foo") = "하이"
+ *
+ *
+ * @param sourceStr 비교할 문자열
+ * @param compareStr 비교 대상 문자열
+ * @param returnStr sourceStr와 compareStr의 값이 같을 때 반환할 문자열
+ * @return sourceStr과 compareStr의 값이 동일(equal)할 때 returnStr을 반환하며,
+ * + * 인자로 받은 String이 null일 경우 ""로 리턴한다. + * @param src null값일 가능성이 있는 String 값. + * @return 만약 String이 null 값일 경우 ""로 바꾼 String 값. + *+ */ + public static String nullConvert(Object src) { + //if (src != null && src.getClass().getName().equals("java.math.BigDecimal")) { + if (src != null && src instanceof java.math.BigDecimal) { + return ((BigDecimal) src).toString(); + } + + if (src == null || src.equals("null")) { + return ""; + } else { + return ((String) src).trim(); + } + } + + /** + *
+ * 인자로 받은 String이 null일 경우 ""로 리턴한다. + * @param src null값일 가능성이 있는 String 값. + * @return 만약 String이 null 값일 경우 ""로 바꾼 String 값. + *+ */ + public static String nullConvert(String src) { + + if (src == null || src.equals("null") || "".equals(src) || " ".equals(src)) { + return ""; + } else { + return src.trim(); + } + } + + /** + *
+ * 인자로 받은 String이 null일 경우 "0"로 리턴한다. + * @param src null값일 가능성이 있는 String 값. + * @return 만약 String이 null 값일 경우 "0"로 바꾼 String 값. + *+ */ + public static int zeroConvert(Object src) { + + if (src == null || src.equals("null")) { + return 0; + } else { + return Integer.parseInt(((String) src).trim()); + } + } + + /** + *
+ * 인자로 받은 String이 null일 경우 ""로 리턴한다. + * @param src null값일 가능성이 있는 String 값. + * @return 만약 String이 null 값일 경우 ""로 바꾼 String 값. + *+ */ + public static int zeroConvert(String src) { + + if (src == null || src.equals("null") || "".equals(src) || " ".equals(src)) { + return 0; + } else { + return Integer.parseInt(src.trim()); + } + } + + /** + *
문자열에서 {@link Character#isWhitespace(char)}에 정의된 + * 모든 공백문자를 제거한다.
+ * + *
+ * StringUtil.removeWhitespace(null) = null
+ * StringUtil.removeWhitespace("") = ""
+ * StringUtil.removeWhitespace("abc") = "abc"
+ * StringUtil.removeWhitespace(" ab c ") = "abc"
+ *
+ *
+ * @param str 공백문자가 제거도어야 할 문자열
+ * @return the 공백문자가 제거된 문자열, null이 입력되면 null이 리턴
+ */
+ public static String removeWhitespace(String str) {
+ if (isEmpty(str)) {
+ return str;
+ }
+ int sz = str.length();
+ char[] chs = new char[sz];
+ int count = 0;
+ for (int i = 0; i < sz; i++) {
+ if (!Character.isWhitespace(str.charAt(i))) {
+ chs[count++] = str.charAt(i);
+ }
+ }
+ if (count == sz) {
+ return str;
+ }
+
+ return new String(chs, 0, count);
+ }
+
+ /**
+ * Html 코드가 들어간 문서를 표시할때 태그에 손상없이 보이기 위한 메서드
+ *
+ * @param strString
+ * @return HTML 태그를 치환한 문자열
+ */
+ public static String checkHtmlView(String strString) {
+ String strNew = "";
+
+ StringBuffer strTxt = new StringBuffer("");
+
+ char chrBuff;
+ int len = strString.length();
+
+ for (int i = 0; i < len; i++) {
+ chrBuff = (char) strString.charAt(i);
+
+ switch (chrBuff) {
+ case '<':
+ strTxt.append("<");
+ break;
+ case '>':
+ strTxt.append(">");
+ break;
+ case '"':
+ strTxt.append(""");
+ break;
+ case 10:
+ strTxt.append("{@link String#toLowerCase()}를 이용하여 소문자로 변환한다.
+ * + *
+ * StringUtil.lowerCase(null) = null
+ * StringUtil.lowerCase("") = ""
+ * StringUtil.lowerCase("aBc") = "abc"
+ *
+ *
+ * @param str 소문자로 변환되어야 할 문자열
+ * @return 소문자로 변환된 문자열, null이 입력되면 null 리턴
+ */
+ public static String lowerCase(String str) {
+ if (str == null) {
+ return null;
+ }
+
+ return str.toLowerCase();
+ }
+
+ /**
+ * {@link String#toUpperCase()}를 이용하여 대문자로 변환한다.
+ * + *
+ * StringUtil.upperCase(null) = null
+ * StringUtil.upperCase("") = ""
+ * StringUtil.upperCase("aBc") = "ABC"
+ *
+ *
+ * @param str 대문자로 변환되어야 할 문자열
+ * @return 대문자로 변환된 문자열, null이 입력되면 null 리턴
+ */
+ public static String upperCase(String str) {
+ if (str == null) {
+ return null;
+ }
+
+ return str.toUpperCase();
+ }
+
+ /**
+ * 입력된 String의 앞쪽에서 두번째 인자로 전달된 문자(stripChars)를 모두 제거한다.
+ * + *
+ * StringUtil.stripStart(null, *) = null
+ * StringUtil.stripStart("", *) = ""
+ * StringUtil.stripStart("abc", "") = "abc"
+ * StringUtil.stripStart("abc", null) = "abc"
+ * StringUtil.stripStart(" abc", null) = "abc"
+ * StringUtil.stripStart("abc ", null) = "abc "
+ * StringUtil.stripStart(" abc ", null) = "abc "
+ * StringUtil.stripStart("yxabc ", "xyz") = "abc "
+ *
+ *
+ * @param str 지정된 문자가 제거되어야 할 문자열
+ * @param stripChars 제거대상 문자열
+ * @return 지정된 문자가 제거된 문자열, null이 입력되면 null 리턴
+ */
+ public static String stripStart(String str, String stripChars) {
+ int strLen;
+ if (str == null || (strLen = str.length()) == 0) {
+ return str;
+ }
+ int start = 0;
+ if (stripChars == null) {
+ while ((start != strLen) && Character.isWhitespace(str.charAt(start))) {
+ start++;
+ }
+ } else if (stripChars.length() == 0) {
+ return str;
+ } else {
+ while ((start != strLen) && (stripChars.indexOf(str.charAt(start)) != -1)) {
+ start++;
+ }
+ }
+
+ return str.substring(start);
+ }
+
+ /**
+ * 입력된 String의 뒤쪽에서 두번째 인자로 전달된 문자(stripChars)를 모두 제거한다.
+ * + *
+ * StringUtil.stripEnd(null, *) = null
+ * StringUtil.stripEnd("", *) = ""
+ * StringUtil.stripEnd("abc", "") = "abc"
+ * StringUtil.stripEnd("abc", null) = "abc"
+ * StringUtil.stripEnd(" abc", null) = " abc"
+ * StringUtil.stripEnd("abc ", null) = "abc"
+ * StringUtil.stripEnd(" abc ", null) = " abc"
+ * StringUtil.stripEnd(" abcyx", "xyz") = " abc"
+ *
+ *
+ * @param str 지정된 문자가 제거되어야 할 문자열
+ * @param stripChars 제거대상 문자열
+ * @return 지정된 문자가 제거된 문자열, null이 입력되면 null 리턴
+ */
+ public static String stripEnd(String str, String stripChars) {
+ int end;
+ if (str == null || (end = str.length()) == 0) {
+ return str;
+ }
+
+ if (stripChars == null) {
+ while ((end != 0) && Character.isWhitespace(str.charAt(end - 1))) {
+ end--;
+ }
+ } else if (stripChars.length() == 0) {
+ return str;
+ } else {
+ while ((end != 0) && (stripChars.indexOf(str.charAt(end - 1)) != -1)) {
+ end--;
+ }
+ }
+
+ return str.substring(0, end);
+ }
+
+ /**
+ * 입력된 String의 앞, 뒤에서 두번째 인자로 전달된 문자(stripChars)를 모두 제거한다.
+ * + *
+ * StringUtil.strip(null, *) = null
+ * StringUtil.strip("", *) = ""
+ * StringUtil.strip("abc", null) = "abc"
+ * StringUtil.strip(" abc", null) = "abc"
+ * StringUtil.strip("abc ", null) = "abc"
+ * StringUtil.strip(" abc ", null) = "abc"
+ * StringUtil.strip(" abcyx", "xyz") = " abc"
+ *
+ *
+ * @param str 지정된 문자가 제거되어야 할 문자열
+ * @param stripChars 제거대상 문자열
+ * @return 지정된 문자가 제거된 문자열, null이 입력되면 null 리턴
+ */
+ public static String strip(String str, String stripChars) {
+ if (isEmpty(str)) {
+ return str;
+ }
+
+ String srcStr = str;
+ srcStr = stripStart(srcStr, stripChars);
+
+ return stripEnd(srcStr, stripChars);
+ }
+
+ /**
+ * 문자열을 지정한 분리자에 의해 지정된 길이의 배열로 리턴하는 메서드.
+ * @param source 원본 문자열
+ * @param separator 분리자
+ * @param arraylength 배열 길이
+ * @return 분리자로 나뉘어진 문자열 배열
+ */
+ public static String[] split(String source, String separator, int arraylength) throws NullPointerException {
+ String[] returnVal = new String[arraylength];
+ int cnt = 0;
+ int index0 = 0;
+ int index = source.indexOf(separator);
+ while (index >= 0 && cnt < (arraylength - 1)) {
+ returnVal[cnt] = source.substring(index0, index);
+ index0 = index + 1;
+ index = source.indexOf(separator, index + 1);
+ cnt++;
+ }
+ returnVal[cnt] = source.substring(index0);
+ if (cnt < (arraylength - 1)) {
+ for (int i = cnt + 1; i < arraylength; i++) {
+ returnVal[i] = "";
+ }
+ }
+
+ return returnVal;
+ }
+
+ /**
+ * 문자열 A에서 Z사이의 랜덤 문자열을 구하는 기능을 제공 시작문자열과 종료문자열 사이의 랜덤 문자열을 구하는 기능
+ *
+ * @param startChr
+ * - 첫 문자
+ * @param endChr
+ * - 마지막문자
+ * @return 랜덤문자
+ * @exception MyException
+ * @see
+ */
+ public static String getRandomStr(char startChr, char endChr) {
+
+ int randomInt;
+ String randomStr = null;
+
+ // 시작문자 및 종료문자를 아스키숫자로 변환한다.
+ int startInt = Integer.valueOf(startChr);
+ int endInt = Integer.valueOf(endChr);
+
+ // 시작문자열이 종료문자열보가 클경우
+ if (startInt > endInt) {
+ throw new IllegalArgumentException("Start String: " + startChr + " End String: " + endChr);
+ }
+
+ // 랜덤 객체 생성
+ SecureRandom rnd = new SecureRandom();
+
+ do {
+ // 시작문자 및 종료문자 중에서 랜덤 숫자를 발생시킨다.
+ randomInt = rnd.nextInt(endInt + 1);
+ } while (randomInt < startInt); // 입력받은 문자 'A'(65)보다 작으면 다시 랜덤 숫자 발생.
+
+ // 랜덤 숫자를 문자로 변환 후 스트링으로 다시 변환
+ randomStr = (char) randomInt + "";
+
+ // 랜덤문자열를 리턴
+ return randomStr;
+ }
+
+ /**
+ * 문자열을 다양한 문자셋(EUC-KR[KSC5601],UTF-8..)을 사용하여 인코딩하는 기능 역으로 디코딩하여 원래의 문자열을
+ * 복원하는 기능을 제공함 String temp = new String(문자열.getBytes("바꾸기전 인코딩"),"바꿀 인코딩");
+ * String temp = new String(문자열.getBytes("8859_1"),"KSC5601"); => UTF-8 에서
+ * EUC-KR
+ *
+ * @param srcString
+ * - 문자열
+ * @param srcCharsetNm
+ * - 원래 CharsetNm
+ * @param charsetNm
+ * - CharsetNm
+ * @return 인(디)코딩 문자열
+ * @exception MyException
+ * @see
+ */
+ public static String getEncdDcd(String srcString, String srcCharsetNm, String cnvrCharsetNm) {
+
+ String rtnStr = null;
+
+ if (srcString == null)
+ return null;
+
+ try {
+ rtnStr = new String(srcString.getBytes(srcCharsetNm), cnvrCharsetNm);
+ } catch (UnsupportedEncodingException e) {
+ rtnStr = null;
+ }
+
+ return rtnStr;
+ }
+
+ /**
+ * 특수문자를 웹 브라우저에서 정상적으로 보이기 위해 특수문자를 처리('<' -> & lT)하는 기능이다
+ * @param srcString - '<'
+ * @return 변환문자열('<' -> "<"
+ * @exception MyException
+ * @see
+ */
+ public static String getSpclStrCnvr(String srcString) {
+
+ String rtnStr = null;
+
+ try {
+ StringBuffer strTxt = new StringBuffer("");
+
+ char chrBuff;
+ int len = srcString.length();
+
+ for (int i = 0; i < len; i++) {
+ chrBuff = (char) srcString.charAt(i);
+
+ switch (chrBuff) {
+ case '<':
+ strTxt.append("<");
+ break;
+ case '>':
+ strTxt.append(">");
+ break;
+ case '&':
+ strTxt.append("&");
+ break;
+ default:
+ strTxt.append(chrBuff);
+ }
+ }
+
+ rtnStr = strTxt.toString();
+
+ } catch (Exception e) {
+ LOGGER.debug("{}", e);
+ }
+
+ return rtnStr;
+ }
+
+ /**
+ * 응용어플리케이션에서 고유값을 사용하기 위해 시스템에서17자리의TIMESTAMP값을 구하는 기능
+ *
+ * @param
+ * @return Timestamp 값
+ * @exception MyException
+ * @see
+ */
+ public static String getTimeStamp() {
+
+ String rtnStr = null;
+
+ // 문자열로 변환하기 위한 패턴 설정(년도-월-일 시:분:초:초(자정이후 초))
+ String pattern = "yyyyMMddhhmmssSSS";
+
+ SimpleDateFormat sdfCurrent = new SimpleDateFormat(pattern, Locale.KOREA);
+ Timestamp ts = new Timestamp(System.currentTimeMillis());
+
+ rtnStr = sdfCurrent.format(ts.getTime());
+
+ return rtnStr;
+ }
+
+ /**
+ * html의 특수문자를 표현하기 위해
+ *
+ * @param srcString
+ * @return String
+ * @exception Exception
+ * @see
+ */
+ public static String getHtmlStrCnvr(String srcString) {
+
+ String tmpString = srcString;
+
+ tmpString = tmpString.replaceAll("<", "<");
+ tmpString = tmpString.replaceAll(">", ">");
+ tmpString = tmpString.replaceAll("&", "&");
+ tmpString = tmpString.replaceAll(" ", " ");
+ tmpString = tmpString.replaceAll("'", "\'");
+ tmpString = tmpString.replaceAll(""", "\"");
+
+ return tmpString;
+
+ }
+
+ /**
+ * 날짜 형식의 문자열 내부에 마이너스 character(-)를 추가한다.
+ * + *
+ * StringUtil.addMinusChar("20100901") = "2010-09-01"
+ *
+ *
+ * @param date 입력받는 문자열
+ * @return " - "가 추가된 입력문자열
+ */
+ public static String addMinusChar(String date) {
+ if (date.length() == 8)
+ return date.substring(0, 4).concat("-").concat(date.substring(4, 6)).concat("-").concat(date.substring(6, 8));
+ else
+ return "";
+ }
+}
diff --git a/src/main/java/kcg/imis/cmmn/egov/util/EgovWebUtil.java b/src/main/java/kcg/imis/cmmn/egov/util/EgovWebUtil.java
new file mode 100644
index 0000000..c521fc3
--- /dev/null
+++ b/src/main/java/kcg/imis/cmmn/egov/util/EgovWebUtil.java
@@ -0,0 +1,111 @@
+package kcg.imis.cmmn.egov.util;
+
+import java.util.regex.Pattern;
+
+/**
+ * 교차접속 스크립트 공격 취약성 방지(파라미터 문자열 교체)
+ *
+ * + * << 개정이력(Modification Information) >> + * + * 수정일 수정자 수정내용 + * ------- -------- --------------------------- + * 2011.10.10 한성곤 최초 생성 + * + *+ */ + +public class EgovWebUtil { + public static String clearXSSMinimum(String value) { + if (value == null || value.trim().equals("")) { + return ""; + } + + String returnValue = value; + + returnValue = returnValue.replaceAll("&", "&"); + returnValue = returnValue.replaceAll("<", "<"); + returnValue = returnValue.replaceAll(">", ">"); + returnValue = returnValue.replaceAll("\"", """); + returnValue = returnValue.replaceAll("\'", "'"); + returnValue = returnValue.replaceAll("[.]", "."); + returnValue = returnValue.replaceAll("%2E", "."); + returnValue = returnValue.replaceAll("%2F", "/"); + return returnValue; + } + + public static String clearXSSMaximum(String value) { + String returnValue = value; + returnValue = clearXSSMinimum(returnValue); + + returnValue = returnValue.replaceAll("%00", null); + + returnValue = returnValue.replaceAll("%", "%"); + + // \\. => . + + returnValue = returnValue.replaceAll("\\.\\./", ""); // ../ + returnValue = returnValue.replaceAll("\\.\\.\\\\", ""); // ..\ + returnValue = returnValue.replaceAll("\\./", ""); // ./ + returnValue = returnValue.replaceAll("%2F", ""); + + return returnValue; + } + + public static String filePathBlackList(String value) { + String returnValue = value; + if (returnValue == null || returnValue.trim().equals("")) { + return ""; + } + + returnValue = returnValue.replaceAll("\\.\\./", ""); // ../ + returnValue = returnValue.replaceAll("\\.\\.\\\\", ""); // ..\ + returnValue = returnValue.replaceAll("\\.\\.", ""); // .. + + return returnValue; + } + + /** + * 행안부 보안취약점 점검 조치 방안. + * + * @param value + * @return + */ + public static String filePathReplaceAll(String value) { + String returnValue = value; + if (returnValue == null || returnValue.trim().equals("")) { + return ""; + } + + returnValue = returnValue.replaceAll("/", ""); + // Findbugs 수정 : replaceAll은 첫 번째 인자값을 정규식으로 취급하기때문에 역슬래쉬 1개를 표현하기 위해 4개를 입력해야 한다. + returnValue = returnValue.replaceAll("\\\\", ""); + returnValue = returnValue.replaceAll("\\.\\.", ""); // .. + returnValue = returnValue.replaceAll("&", ""); + + return returnValue; + } + + public static String filePathWhiteList(String value) { + return value; + } + + public static boolean isIPAddress(String str) { + Pattern ipPattern = Pattern.compile("\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}"); + + return ipPattern.matcher(str).matches(); + } + + public static String removeCRLF(String parameter) { + return parameter.replaceAll("\r", "").replaceAll("\n", ""); + } + + public static String removeSQLInjectionRisk(String parameter) { + return parameter.replaceAll("\\p{Space}", "").replaceAll("\\*", "").replaceAll("%", "").replaceAll(";", "").replaceAll("-", "").replaceAll("\\+", "").replaceAll(",", ""); + } + + public static String removeOSCmdRisk(String parameter) { + return parameter.replaceAll("\\p{Space}", "").replaceAll("\\*", "").replaceAll("[|]", "").replaceAll(";", ""); + } + +} \ No newline at end of file diff --git a/src/main/java/kcg/imis/cmmn/egov/vo/FileVO.java b/src/main/java/kcg/imis/cmmn/egov/vo/FileVO.java new file mode 100644 index 0000000..890f6c7 --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/egov/vo/FileVO.java @@ -0,0 +1,241 @@ +package kcg.imis.cmmn.egov.vo; + +import java.io.Serializable; + +import org.apache.commons.lang3.builder.ToStringBuilder; + +/** + * @Class Name : FileVO.java + * @Description : 파일정보 처리를 위한 VO 클래스 + * @Modification Information + * + * 수정일 수정자 수정내용 ------- ------- ------------------- 2009. 3. 25. + * 이삼섭 + * + * @author 공통 서비스 개발팀 이삼섭 + * @since 2009. 3. 25. + * @version + * @see + * + */ +public class FileVO implements Serializable { + + /** + * serialVersion UID + */ + private static final long serialVersionUID = -287950405903719128L; + /** + * 첨부파일 아이디 + */ + public String atchFileId = ""; + /** + * 생성일자 + */ + public String creatDt = ""; + /** + * 파일내용 + */ + public String fileCn = ""; + /** + * 파일확장자 + */ + public String fileExtsn = ""; + /** + * 파일크기 + */ + public String fileMg = ""; + /** + * 파일연번 + */ + public String fileSn = ""; + /** + * 파일저장경로 + */ + public String fileStreCours = ""; + /** + * 원파일명 + */ + public String orignlFileNm = ""; + /** + * 저장파일명 + */ + public String streFileNm = ""; + + /** + * atchFileId attribute를 리턴한다. + * + * @return the atchFileId + */ + public String getAtchFileId() { + return atchFileId; + } + + /** + * atchFileId attribute 값을 설정한다. + * + * @param atchFileId + * the atchFileId to set + */ + public void setAtchFileId(String atchFileId) { + this.atchFileId = atchFileId; + } + + /** + * creatDt attribute를 리턴한다. + * + * @return the creatDt + */ + public String getCreatDt() { + return creatDt; + } + + /** + * creatDt attribute 값을 설정한다. + * + * @param creatDt + * the creatDt to set + */ + public void setCreatDt(String creatDt) { + this.creatDt = creatDt; + } + + /** + * fileCn attribute를 리턴한다. + * + * @return the fileCn + */ + public String getFileCn() { + return fileCn; + } + + /** + * fileCn attribute 값을 설정한다. + * + * @param fileCn + * the fileCn to set + */ + public void setFileCn(String fileCn) { + this.fileCn = fileCn; + } + + /** + * fileExtsn attribute를 리턴한다. + * + * @return the fileExtsn + */ + public String getFileExtsn() { + return fileExtsn; + } + + /** + * fileExtsn attribute 값을 설정한다. + * + * @param fileExtsn + * the fileExtsn to set + */ + public void setFileExtsn(String fileExtsn) { + this.fileExtsn = fileExtsn; + } + + /** + * fileMg attribute를 리턴한다. + * + * @return the fileMg + */ + public String getFileMg() { + return fileMg; + } + + /** + * fileMg attribute 값을 설정한다. + * + * @param fileMg + * the fileMg to set + */ + public void setFileMg(String fileMg) { + this.fileMg = fileMg; + } + + /** + * fileSn attribute를 리턴한다. + * + * @return the fileSn + */ + public String getFileSn() { + return fileSn; + } + + /** + * fileSn attribute 값을 설정한다. + * + * @param fileSn + * the fileSn to set + */ + public void setFileSn(String fileSn) { + this.fileSn = fileSn; + } + + /** + * fileStreCours attribute를 리턴한다. + * + * @return the fileStreCours + */ + public String getFileStreCours() { + return fileStreCours; + } + + /** + * fileStreCours attribute 값을 설정한다. + * + * @param fileStreCours + * the fileStreCours to set + */ + public void setFileStreCours(String fileStreCours) { + this.fileStreCours = fileStreCours; + } + + /** + * orignlFileNm attribute를 리턴한다. + * + * @return the orignlFileNm + */ + public String getOrignlFileNm() { + return orignlFileNm; + } + + /** + * orignlFileNm attribute 값을 설정한다. + * + * @param orignlFileNm + * the orignlFileNm to set + */ + public void setOrignlFileNm(String orignlFileNm) { + this.orignlFileNm = orignlFileNm; + } + + /** + * streFileNm attribute를 리턴한다. + * + * @return the streFileNm + */ + public String getStreFileNm() { + return streFileNm; + } + + /** + * streFileNm attribute 값을 설정한다. + * + * @param streFileNm + * the streFileNm to set + */ + public void setStreFileNm(String streFileNm) { + this.streFileNm = streFileNm; + } + + @Override + public String toString() { + return "FileVO [atchFileId=" + atchFileId + ", creatDt=" + creatDt + ", fileCn=" + fileCn + ", fileExtsn=" + fileExtsn + ", fileMg=" + fileMg + ", fileSn=" + fileSn + ", fileStreCours=" + + fileStreCours + ", orignlFileNm=" + orignlFileNm + ", streFileNm=" + streFileNm + "]"; + } + +} diff --git a/src/main/java/kcg/imis/cmmn/excel/AbstractExcelExport.java b/src/main/java/kcg/imis/cmmn/excel/AbstractExcelExport.java new file mode 100644 index 0000000..4414bf0 --- /dev/null +++ b/src/main/java/kcg/imis/cmmn/excel/AbstractExcelExport.java @@ -0,0 +1,65 @@ +/** + * AbstractExcelGenerator.java + * @author 임새미 + * @since 2016. 10. 14. + * + * 수정일 수정자 수정내용 + * ------------- -------- --------------------------- + * 2016. 10. 14. 임새미 최초생성 + * + */ +package kcg.imis.cmmn.excel; + +import java.util.Map; + +import org.apache.poi.xssf.usermodel.XSSFCell; +import org.apache.poi.xssf.usermodel.XSSFCellStyle; +import org.apache.poi.xssf.usermodel.XSSFRow; +import org.apache.poi.xssf.usermodel.XSSFSheet; +import org.apache.poi.xssf.usermodel.XSSFWorkbook; + +/** + * @FileName : AbstractExcelExport.java + * @Project : 국제해양프로젝트 + * @Date : 2018. 3. 29. + * @작성자 : Moon + * @변경이력 : + * @프로그램 설명 : + */ +public abstract class AbstractExcelExport implements ExcelExport { + + /* 기본적으로 3번 라인이 시작라인 */ + protected int firstRow = 2; + protected String template = null; + + /* 파라미터 맵 */ + protected Map