Package dev.jcputney.elearning.parser.validators.rules.common

Class PathSecurityRule

java.lang.Object

dev.jcputney.elearning.parser.validators.rules.common.PathSecurityRule

All Implemented Interfaces:

ValidationRule<Scorm12Manifest>

public class PathSecurityRule
extends Object
implements ValidationRule<Scorm12Manifest>

Validates that all file paths in the manifest are safe and don't contain directory traversal patterns, absolute paths, or external references.

Security Requirements:

• No path traversal (../ or ..\)
• No absolute paths (/path or C:\path)
• No external URLs (http://, https://, //)
• No null bytes or control characters

Constructor Summary

Constructors

Constructor	Description
PathSecurityRule()

Method Summary

Modifier and Type	Method	Description
String	getRuleName()	Human-readable name of this rule for logging and debugging.
String	getSpecReference()	Specification reference for traceability and documentation.
ValidationResult	validate(Scorm12Manifest manifest)	Validates the manifest according to this rule.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

PathSecurityRule

public PathSecurityRule()

Method Details

getRuleName

public String getRuleName()

Description copied from interface: ValidationRule

Human-readable name of this rule for logging and debugging.

Specified by:

getRuleName in interface ValidationRule<Scorm12Manifest>

Returns:

Rule name (e.g., "Resource Reference Validation")

getSpecReference

public String getSpecReference()

Description copied from interface: ValidationRule

Specification reference for traceability and documentation. Used to trace validation back to spec requirements.

Specified by:

getSpecReference in interface ValidationRule<Scorm12Manifest>

Returns:

Spec reference (e.g., "SCORM 1.2 CAM Section 2.3.4")

validate

public ValidationResult validate(Scorm12Manifest manifest)

Description copied from interface: ValidationRule

Validates the manifest according to this rule.

Specified by:

validate in interface ValidationRule<Scorm12Manifest>

Parameters:

manifest - The manifest to validate (must not be null)

Returns:

ValidationResult with any issues found (never null)