JP5329376B2 - Web application character code checking method, system and program - Google Patents

Description

  The present invention relates to an input check processing technology in a Web application that uses server-side java (registered trademark) technology and uses Struts as a Web application framework, and in particular, efficiently performs input check processing of illegal character codes. The present invention relates to a technique suitable for the above.

  In recent years, there has been a case where the character code set to be used has been changed with the upgrade of the client OS, and it has become possible to input characters that could not be input by conventional clients.

  On the other hand, the character code used in the Web application is a condition determined at the time of system construction, and it is difficult to change the character code set after the system construction. Therefore, it is necessary to check whether the character code of the data transmitted from the client is valid and to register a character that is not permitted by the Web application.

  For example, Windows Vista (registered trademark) provided after Windows XP (registered trademark) uses the character code set of “JIS X 0213: 2004”, whereas existing (Windows XP (registered trademark) The web application is built with shift-jis, and if an invalid character code exists in the data transmitted from a Windows Vista (registered trademark) PC (personal computer), the existing web application operates normally. Since it may disappear, it is necessary to add a function for checking the character code to prevent an illegal character code.

  For Web applications, in order to efficiently develop Web applications using server-side java (registered trademark) technology, for example, as described in Non-Patent Documents 1, 2, and 3, MVC (Model, View, Control ) “Struts”, a framework suitable for models, is often used.

  Struts is an open source framework that is useful for developing Web applications using Java (registered trademark) Servlet / JSP (Java (registered trademark) Server Pages) technology developed by the "Jakarta Project". , Written in 100% Pure Java (registered trademark). In the environment using Struts, the input data check mechanism is implemented as a component part, and the framework part is also included in the input data check function. It is common to use the functions provided.

  The input verification function of this Web application framework (Struts) is processed at the start of Action 108 in the application server 102 shown in FIG. 1, for example. At this time, the input verification function is transmitted from the Web browse 101 of the client terminal 100. All the data is stored in the ActionForm 107 in the application server 102.

  However, such an input verification function of the framework performs error detection processing for each item. Therefore, if an error is detected in a certain item, the subsequent items are not processed, and control is returned to the controller, that is, the ActionServlet 112 in FIG. 1, and this ActionServlet 112 (controller) returns to the ActionForm 107 via the screen display class 113. Based on the stored data, the data is transmitted to the client terminal 100.

  Therefore, in a case where character code errors occur simultaneously in a plurality of items, the first character code error can be processed correctly, but the second and subsequent character code errors cannot be detected, and the client terminal 100 Web Since the data received from the browser 101 is returned as it is, if a character code outside the range set in the application server 102 is transmitted after the second error data, the character is garbled. There is.

  For example, in Patent Document 1, a computer device provided separately from a Web application server receives a response with inspection information and a response with meta information transmitted from the Web application server, and uses the meta information as a clue. Inspection information (expected value, inspection condition) is acquired from the specification DB, the output item is inspected based on the acquired inspection information, and the inspection information is the expected value described in the Web application specification. In some cases, a technique is described in which whether or not an output item matches an expected value, and a message indicating pass or fail is output as a test result, this technique is described as server-side java (registered trademark). Component parts in an environment that uses Struts as a web application framework by utilizing technology It does not use the input data check mechanism implemented as.

JP 2008-112300 A

"IT: Web application construction technique using serial Struts (1)", [searched on November 10, 2009], Internet <URL: http://www.atmarkit.co.jp/fjava/rensai3/struts01/struts01_1 .html>. “Java (registered trademark) road: Struts (17. Validator)” [searched on November 10, 2009], Internet <URL: http://www.javaroad.jp/opensource/js_struts19.htm>. “Web application development with Struts” [searched on November 10, 2009], Internet <URL: http://www.infoscience.co.jp/technical/struts/index.html>.

  The problem to be solved is that the conventional technology uses a server side java (registered trademark) technology to check the input data that is implemented as a component part in an environment where Struts is used in the Web application framework. This is a point that cannot be used effectively for the character code check process.

  The object of the present invention is to solve these problems of the prior art, and to improve the illegal character code input check processing in a web application using the server side java (registered trademark) technology and using Struts as the web application framework. It is to improve efficiency.

  In order to achieve the above object, in the present invention, a character code check function is added to an input check processing function in an existing Web application that uses Struts as a Web application framework that uses server-side java (registered trademark) technology. The character code check processing is performed using the definition by the input verification function of the conventional web application framework. In particular, by performing the character code check process in the controller (ActionServlet), it is possible to check the character codes of a plurality of items at once. In addition, by utilizing the definition information of various definition files (validation.xml, Struts-config.xml) used by the Web application framework (Strust), the settings are the same as the setting procedure of the input validation function of the framework. The item to which the character code check is applied can be arbitrarily specified for each field of the screen.

  According to the present invention, since the definition of the input verification function of the Web application framework can be used as it is for the definition of the character code check, the versatility is high. In addition, since the character code check program is commonly processed by the controller (ActionServlet) of the Web application and does not depend on the individual screen processing, there are few cases where the character code check program is added to the existing Web application later. Can be easily added with changes.

It is a block diagram which shows the structural example of the character code check system of the Web application which concerns on this invention. FIG. 3 is a flowchart showing a first example of a procedure of a character code check method for a Web application according to the present invention of the Web application character code check system in FIG. 1. FIG. It is a flowchart which shows the 2nd example of a procedure of the character code check method of the Web application which concerns on this invention of the character code check system of the Web application in FIG. It is explanatory drawing which shows the structural example of the character code check definition file in FIG. It is explanatory drawing which shows the structural example of the Struts-config.xml file in FIG. It is explanatory drawing which shows the structural example of validation.xml file in FIG.

  Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings. In FIG. 1, 100 is a client terminal (denoted as “terminal” in the figure), 101 is a Web browser operating on the client terminal 100, 102 is an application server, 110 is a database, and the client terminal 100 and the application server 102 are illustrated. Not connected via a network such as the Internet.

  The client terminal 100 and the application server 102 have a computer configuration including a CPU (Central Processing Unit), a main memory, a display device, an input device, an external storage device, and the like, and are stored in a CD-ROM or the like via an optical disk drive device or the like. After the program or data recorded on the medium is installed in the external storage device, the function of each processing unit is executed by reading the program or data from the external storage device into the main memory and processing it by the CPU.

  In particular, the application server 102 of this example uses Struts as a Web application framework that uses server-side java (registered trademark) technology. Action 108, business logic class 109 are functions that execute programmed computer processing. , A screen display class 111 and an ActionServlet (controller) 112.

  When the ActionServlet (controller) 112 receives a request from the Web browser of the client terminal 100, it stores the request data in the ActionForm 107 and calls the Action 108.

  The Action 108 executes the business logic class 109 based on the data stored in the ActionForm 107, calls JSP (Java (registered trademark) Server Pages), and performs access control on the database 110.

  JSP is a technology that uses the Java (registered trademark) language to dynamically generate a web page on a web server and send it to the client. The Java (registered trademark) program is embedded in the HTML file. Then, the program is executed in response to the request from the client, and only the processing result is transmitted to the client. Since the processing result to be sent is in the normal HTML format, it is possible to construct a Web application without incorporating special functions in the Web browser.

  In the application server 102 of this example that performs such operations, a character code check function is added to an input check processing function in an existing Web application that uses Struts as a Web application framework that uses server-side java (registered trademark) technology. The character code check process is performed using the definition by the input verification function of the conventional Web application framework.

  In particular, in the application server 102 of this example, by performing the character code check process in the ActionServlet 112, it is possible to check the character codes of a plurality of items at once.

  That is, the ActionServlet 112 executes the character code check program 103 and performs the character code check process according to the present invention using the character code check definition file 104, validation.xml 105, and Struts-config.xml 106.

  At this time, the application server 102 uses the definition information in validation.xml 105 and Struts-config.xml 106, which are various definition files used by the Web application framework (Strust), to set the input validation function of the framework. With the same setting, the item to which the character code check is applied can be arbitrarily specified for each field of the screen.

  In Struts-config.xml 106, which ActionForm (107) stores the request data, which Action (108) is called, which JSP is called after the execution of Action, etc. are defined. .xml 105 defines a rule that is used in the Validator to check whether the value stored in the ActionForm (108) matches the specified condition, and when it does not match, an error is displayed.

  As described above, in the application service 102 of this example, the character code input to the web application using Struts as the web application framework is checked using the struts-config.xml file and the validation.xml file. In addition, the computer device is provided with a character code check processing function (character code check program 103) that inherits ActionServlet (112) as a function for executing programmed computer processing.

  The character code check program 103 reads a character code set name (character encoding name) and a character code check rule name that are defined in advance in the character code check definition file 104 and performs character code check, and stores them in the storage device. The struts-config.xml file 106 is searched based on the request request path that is stored and input via the web browser 101 from the client terminal 100, and the form name and validate defined in advance corresponding to the request request path are stored. Acquire each value of attribute and input path and store them in the storage device, determine whether the acquired validate attribute value is true, and if the validate attribute value is not true, If control is returned to ActionServlet 112 and the validate attribute value is true, the following procedure is executed to execute all requests. Performing character code check processing for the Todeta.

  That is, the character code check program 103 searches the validation.xml file 105 based on the acquired form name, and the value of the form name matches and the value of the field property matches the item name of the request request in advance. Identifies the defined field, determines whether or not the acquired character code check rule name is defined in advance in the depend attribute in the identified field, and if it is defined in advance, it is input to the identified field It is determined whether or not the character is included in the character code set of the acquired character encoding name. If the character is not included, an error occurrence is detected, and an error message is generated and output.

  In addition, the character code check program 103 replaces all characters for which an error has been detected with characters existing in the character code set range of the read character encoding name defined in the character code check definition file 104 in advance. An error message is generated using the item name defined in advance in the xml file 105 with the arg0 key, and the input request request path is changed to an input path defined in the struts-config.xml file 106 in advance. , Control is returned to the ActionServlet 112.

  Hereinafter, the processing operation related to the character code check processing according to the present invention by the application server 102 will be specifically described.

  The application server 102 includes a server side Java (registered trademark) technology component execution environment such as a servlet and JSP, and a Web application framework Struts execution environment.

  In FIG. 1, when the client terminal 100 transmits data using the Web browser 101, the process transitions to the character code check program 103 that inherits the ActionServlet 112 of the application server 102.

  The character code check program 103 uses the character code check definition file 104, Struts-config.xml 106, and validation.xml 105 to check the character code of the transmitted data and stores it in the ActionForm 107.

  If the result of the character code check is normal and no error occurs, control is passed to the requested path, the contents of ActionFrom107 are output by the screen display class 111 specified in Struts-config.xml 106, and the output result Is displayed on the Web browser 101 of the client terminal 100.

  If a character code check error occurs, control is passed to the INPUT path defined in Struts-config.xml 106, and an error message is output by the screen display class 111 specified in Struts-config.xml 106. The output result is displayed on the Web browser 101 of the client terminal 100.

  Hereinafter, the processing operation by the character code check program 103 of the Web application server 102 will be described with reference to FIGS. 2 and 3.

  In the process of step S201 in FIG. 2, the character code check program 103 acquires the name of the character code set (character encoding name) for performing the character code check from the character code check definition file 104.

  In the process of step S202, the character code check rule name used when referring to validation.xml 105 is acquired from the character code check definition file 104.

  In the process of step S203, a character to be replaced when a character code error occurs is acquired from the character code check definition file 104 so that the character code error is displayed without being garbled. The replacement character needs to be a character that is not garbled, and therefore needs to be a character that exists in the range of the character code set acquired in the process of step S201.

  In the process of step S204, URL path information of the request request transmitted from the client terminal 100 is acquired. In the process of step S205, the Struts-config.xml106 file is searched based on the acquired path information, and the URL path information is obtained. Get the form name, validate attribute, and input attribute values corresponding to.

  In the process of step S206, it is determined whether or not the Validate attribute is true. If the Validate attribute is true, the input validation process based on the definition of validation.xml 105 is implemented, and this input validation definition is utilized. In order to check the character code, the process branches to step S301 in FIG. 3. If the validate attribute is other than true, the character code check is not performed, so the process of step S207 is performed, and the request request path remains in the ActionServlet 112. Return control.

  In step S301 in FIG. 3, since it is necessary to check the character codes of all items transmitted from the client, the character codes are checked in the repeated processing for the transmission data items.

  In step S302, a node that matches the form name defined in validation.xml 105 and matches the field property value that matches the item name of the request request is searched from the form name acquired in step S205 of FIG. To do.

  In step S303, it is determined whether the character code check rule acquired in step S202 exists from the dependencies attribute of the corresponding field of validation.xml 105. If it does not exist, the field is not checked for character code, so nothing is processed. If it exists, it is a field that needs to be checked for character code, so the process of step S304 is performed.

  In step S304, when an error occurs due to a character code check, an item name (arg0 key attribute) corresponding to the corresponding field of validation.xml 105 is used for editing by replacing the item name with a part of the error message. To get.

  In step S305, iterative processing (steps S306 to S307) from the first digit to the nth digit of the character input in the specified field is performed.

  In step S306, it is determined whether one character of the data input in the specified field is included in the character set of the character encoding name acquired in step S201 of FIG. 2, and if included, determination of the next character is performed. If it is not included, it is replaced with the replacement character at the time of occurrence of the error acquired in step S203 of FIG.

  When the character code check is completed up to the end of the character input in the specified field, it is determined in step S308 whether replacement of the replacement character has occurred. If replacement has occurred, the action form is set in step S309. Set the replaced item.

  In step S310, the error message is edited using the item name acquired in step S304, and the error message is set.

  After checking all the character code check target fields, it is determined in step S311 whether or not a character code error has occurred.

  If no character code error has occurred, the process branches to step S207 in FIG. 2, and the control is returned to the ActionServlet without changing the request request path. If a character code error has occurred, the process branches to step S208 in FIG. 2, the request request path is changed to the input path acquired in step S205, and control is returned to ActionServlet.

  4 shows details of the definition example (character code check definition file 400) in the character code check definition file 104 in FIG. 1. In the definition 401, the character encoding name acquired in step S201 in FIG. 2 is defined. To do. In the example of FIG. 4, the character encoding name is “MS932”, which is used as a character code set for character code check processing.

  In the definition 402, the character code check rule name acquired in step S202 of FIG. 2 is defined. In the example of FIG. 4, the character code check rule is defined as “charcode” and corresponds to the check rule specified by the dependencies attribute of the validation.xml 105 in FIG. 1, which is shown in detail as validation.xml 600 in FIG. 6. .

  The definition 403 defines a replacement character at the time of occurrence of an error acquired in step S203 in FIG. In the example of FIG. 4, the replacement character is set to “?”, And when a character code error occurs in step S307 of FIG. 3, the error target character is replaced with the replacement character (“?”) Of the definition 403. It is done.

  In the definition 404, a message serving as a basis for editing the error message is defined in step S310 of FIG. {0} in the definition 404 is replaced with the item name ("Matter name") acquired by the arg0 key in the definition 602 in the validation.xml 600 in FIG. 6 in the process of step S304 in FIG. Is replaced with the replacement character (“?”) Acquired from the definition 403 in FIG. 4 in the process of step S203 in FIG. 2, and the error message is edited.

  FIG. 5 shows details of the definition example (Struts-config.xml 500) in Struts-config.xml 106 in FIG. 1, and the definition 501 matches the path of the request request acquired in step S204 of FIG. path is defined. A path that matches the path of the request request is information related to the request processing.

  In the definition 502, the value of the form name acquired in step S205 in FIG. 2 is acquired. In the definition 503, the value of the validate attribute acquired in step S205 in FIG. 2 is acquired in the definition 504 in step S205 of FIG. Input path value is set.

  FIG. 6 shows details of the definition example (validation.xml 600) in validation.xml 105 in FIG. 1. In the definition 601, a rule for performing input check is defined for the depends attribute whose field name is “ankennm”. Finally, since the character code check rule “charcode” is set, this field is a character code check target field.

  In the definition 602, an item name corresponding to the field name is defined (arg0 key) and used for editing an error message.

  The definition of validation.xml 600 in FIG. 6 is the same as that used in the input validation function of the Struts Web application framework of the existing technology, and not only the character code check process but also other input validation definitions. Define.

  As described above with reference to FIGS. 1 to 6, in this example, the character code check function is added to the input check processing function in an existing Web application that uses Struts as a Web application framework using the server-side java technology. A function is added, and character code check processing is performed using a definition by an input verification function of a conventional Web application framework. In particular, by performing the character code check process in the controller (ActionServlet), it is possible to check the character codes of a plurality of items at once. In addition, by utilizing the definition information of various definition files (validation.xml, Struts-config.xml) used by the Web application framework (Struts), the settings are the same as the setting procedure of the input validation function of the framework. The item to which the character code check is applied can be arbitrarily specified for each field of the screen.

  Specifically, as shown in FIG. 1, in order to check the character code input to the web application using Struts as the web application framework using the struts-config.xml file and the validation.xml file, The computer device is provided with a character code check processing function (character code check program 103) inheriting ActionServlet (112) as a function for executing programmed computer processing.

  Then, the character code check program 103 reads the name of the character code set (character encoding name) and the character code check rule name that are defined in advance in the character code check definition file 104 and performs the character code check and stores them in the storage device. The struts-config.xml file 106 is searched based on the request request path that is stored and input via the web browser 101 from the client terminal 100, and the form name and validate defined in advance corresponding to the request request path are stored. Acquire each value of attribute and input path and store them in the storage device, determine whether the acquired validate attribute value is true, and if the validate attribute value is not true, Return control to ActionServlet112, and if validate attribute value is true, execute the following procedure, Performing character code check processing for the quest data.

  That is, the character code check program 103 searches the validation.xml file 105 based on the acquired form name, and the value of the form name matches and the value of the field property matches the item name of the request request in advance. Identifies the defined field, determines whether or not the acquired character code check rule name is defined in advance in the depend attribute in the identified field, and if it is defined in advance, it is input to the identified field It is determined whether or not the character is included in the character code set of the acquired character encoding name. If the character is not included, an error occurrence is detected, and an error message is generated and output.

  In addition, the character code check program 103 replaces all characters for which an error has been detected with characters existing in the character code set range of the read character encoding name defined in the character code check definition file 104 in advance. An error message is generated using the item name defined in advance in the xml file 105 with the arg0 key, and the input request request path is changed to an input path defined in the struts-config.xml file 106 in advance. , Control is returned to the ActionServlet 112.

  In this way, since the definition of the input verification function of the Web application framework can be used as it is for the definition of the character code check, versatility is enhanced. Further, since the character code check program 103 is processed in common by the controller (ActionServlet 112) of the Web application and does not depend on the individual screen processing, when adding the character code check program to the existing Web application later, Easy to add with few changes.

  Thereby, according to this example, it is possible to efficiently perform input check processing in a Web application using Struts as a Web application framework by using server-side java (registered trademark) technology.

  In addition, this invention is not limited to the example demonstrated using FIGS. 1-6, In the range which does not deviate from the summary, various changes are possible. For example, in the configuration illustrated in FIG. 1, the database 110 is configured as a computer system different from the application server 102, but the database 110 may be provided in the application server 102.

  Further, although the Internet is exemplified as a network connecting the client terminal 100 and the application server 102, an intranet may be used.

  The computer configuration example of this example may also be a computer configuration without a keyboard or optical disk drive. In this example, an optical disk is used as a recording medium. However, an FD (Flexible Disk) or the like may be used as a recording medium. As for the program installation, the program may be downloaded and installed via a network via a communication device.

  100: Client terminal 101: Web browser 102: Application server 103: Character code check program 104: Character code check definition file 105: Validation.xml file (Struts framework definition file) 106: Struts-config .xml file (Struts framework definition file), 107: ActionForm, 108: Action, 109: Business logic class, 110: Database, 111: Screen display class, 112: ActionServlet (controller), 400: Character code check definition file 401: Definition (example of character encoding name definition) 402: Definition (example of character code check rule definition) 403: Definition (example of definition of replacement character when error occurs) 404: Definition (definition of error message) Example), 500: Stru ts-config.xml file, 501: definition (path definition example), 502: definition (form name definition example), 503: definition (validation attribute definition example), 504: definition (input path definition example), 600: validation.xml file, 601: definition (definition example of field name and dependencies attribute), 602: definition (definition example of arg0 key attribute).

Claims (5)

A web application character code check method that uses a struts-config.xml file and a validation.xml file to check the character code input to a web application that uses Struts as a web application framework.
Computer device, as a means for performing a programmed computer processor,
It has a character code check processing means that inherits ActionServlet,
The character code check processing means includes:
Read out the name of the character code set (character encoding name) and the character code check rule name that is defined in the character code check definition file in advance, and store them in the storage device.
Search the struts-config.xml file based on the input request request path, and acquire and store the values of form name, validate attribute, and input path that are predefined for the request request path. Memorize in the device,
It is determined whether or not the value of the acquired validate attribute is true. If the validate attribute value is not true, control is returned to the ActionServlet with the request request path, and if the validate attribute value is true, A character code check method for a Web application, wherein a character code check process is performed for all request data by executing the following procedure.
<Procedure>
Search the validation.xml file based on the acquired form name, identify the predefined field whose form name value matches and the field property value matches the item name of the request request,
Determine whether the rule name of the character code check acquired above is defined in advance in the depend attribute in the identified field,
If it is defined in advance, it is determined whether or not the character input in the specified field is included in the character code set of the acquired character encoding name,
If it is not included, an error is detected and an error message is generated and output. A method of checking a character code of a web application according to claim 1,
The character code check processing means
Replace all the characters that detected the error occurrence with characters that exist in the character code set range of the read character encoding name defined in the character code check definition file in advance,
Using the item name defined in advance in arg0 key in the validation.xml file, generate the error message,
A method of checking a character code of a Web application, wherein the input request request path is changed to an input path defined in advance in the struts-config.xml file, and control is returned to the ActionServlet. Character code check system for web applications that checks the character code input to a web application that uses Struts as the web application framework, using the struts-config.xml file and validation.xml file, by programmed computer processing Because
The Web application character code check system includes character code check processing means that inherits ActionServlet as means for executing programmed computer processing,
The character code check processing means includes:
A function that reads a character code set name (character encoding name) and a character code check rule name that are defined in the character code check definition file in advance and stores them in a storage device;
Search the struts-config.xml file based on the input request request path, and acquire and store the values of form name, validate attribute, and input path that are predefined for the request request path. The function to store in the device, and
It is determined whether or not the value of the acquired validate attribute is true. If the validate attribute value is not true, control is returned to the ActionServlet with the request request path, and if the validate attribute value is true, A Web application character code check system characterized by having a function of executing character code check processing for all request data by executing the following procedure.
<Procedure>
Search the validation.xml file based on the acquired form name, identify the predefined field whose form name value matches and the field property value matches the item name of the request request,
Determine whether the rule name of the character code check acquired above is defined in advance in the depend attribute in the identified field,
If it is defined in advance, it is determined whether or not the character input in the specified field is included in the character code set of the acquired character encoding name,
If it is not included, an error is detected and an error message is generated and output. The web application character code check system according to claim 3,
The character code check processing means
Replace all the characters that detected the error occurrence with characters that exist in the character code set range of the read character encoding name defined in the character code check definition file in advance,
Using the item name defined in advance in arg0 key in the validation.xml file, generate the error message,
A character code check system for a Web application, having a function of changing the input request request path to an input path defined in advance in the struts-config.xml file and returning control to the ActionServlet.   A program for causing a computer to execute each process by the character code check processing means in the character code check method of the Web application according to claim 1.

Images