feat: add XMLUtils

backend/framework/sdk/src/main/java/io/metersphere/sdk/util/XMLUtils.java

@@ -0,0 +1,103 @@
+package io.metersphere.sdk.util;
+
+
+import org.apache.commons.lang3.StringUtils;
+import org.dom4j.Document;
+import org.dom4j.DocumentException;
+import org.dom4j.Node;
+import org.dom4j.io.OutputFormat;
+import org.dom4j.io.SAXReader;
+import org.dom4j.io.XMLWriter;
+import org.xml.sax.SAXException;
+import org.xml.sax.helpers.XMLFilterImpl;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.List;
+
+public class XMLUtils {
+    public static final boolean IS_TRANS = false;
+
+    public static Document getDocument(InputStream source) throws DocumentException {
+        SAXReader reader = new SAXReader();
+        try {
+            reader.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
+            reader.setFeature("http://xml.org/sax/features/external-general-entities", false);
+            reader.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
+            reader.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);
+        }catch (Exception e){
+            LogUtils.error(e);
+        }
+        if (!IS_TRANS) {
+            reader.setXMLFilter(XMLUtils.getFilter());
+        }
+        return reader.read(source);
+    }
+
+    public static byte[] getBytes(Document document) throws Exception {
+        OutputFormat format = new OutputFormat();
+        format.setIndentSize(2);
+        format.setNewlines(true);
+        format.setPadText(true);
+        format.setTrimText(false);
+        try (
+                ByteArrayOutputStream out = new ByteArrayOutputStream();
+        ) {
+            // 删除空白的行
+            List<Node> nodes = document.selectNodes("//text()[normalize-space(.)='']");
+            nodes.forEach(node -> {
+                if (node.getText().contains(StringUtils.LF)) {
+                    node.setText(StringUtils.EMPTY);
+                }
+            });
+
+            XMLWriter xw = new XMLWriter(out, format);
+            xw.setEscapeText(IS_TRANS);
+            xw.write(document);
+            xw.flush();
+            xw.close();
+            return out.toByteArray();
+        } catch (IOException e) {
+            LogUtils.error(e);
+        }
+        return new byte[0];
+    }
+
+    public static XMLFilterImpl getFilter() {
+        return new XMLFilterImpl() {
+            @Override
+            public void characters(char[] ch, int start, int length) throws SAXException {
+                String text = new String(ch, start, length);
+                if (length == 1) {
+                    if (StringUtils.equals("&", text)) {
+                        char[] escape = "&amp;".toCharArray();
+                        super.characters(escape, start, escape.length);
+                        return;
+                    }
+                    if (StringUtils.equals("\"", text)) {
+                        char[] escape = "&quot;".toCharArray();
+                        super.characters(escape, start, escape.length);
+                        return;
+                    }
+                    if (StringUtils.equals("'", text)) {
+                        char[] escape = "&apos;".toCharArray();
+                        super.characters(escape, start, escape.length);
+                        return;
+                    }
+                    if (StringUtils.equals("<", text)) {
+                        char[] escape = "&lt;".toCharArray();
+                        super.characters(escape, start, escape.length);
+                        return;
+                    }
+                    if (StringUtils.equals(">", text)) {
+                        char[] escape = "&gt;".toCharArray();
+                        super.characters(escape, start, escape.length);
+                        return;
+                    }
+                }
+                super.characters(ch, start, length);
+            }
+        };
+    }
+}