Tutorial: Durchsuchen von Dateianlagen mit einem Antivirenprogramm

docker run -d --name clamav -p 3310:3310 clamav/clamav:latest

docker logs -f clamav

printf 'PING\n' | nc localhost 3310

mvn -B org.apache.maven.plugins:maven-archetype-plugin:generate -D archetypeGroupId=com.adobe.aem -D archetypeArtifactId=aem-project-archetype -D archetypeVersion=LATEST -D appId=<APP_ID> -D appTitle="<APP_ID>" -D name="<APP_ID>" -D groupId=com.example -D artifactId=<APP_ID> -D aemVersion=cloud

<PROJECT_ROOT>/core/src/main/java/

unzip -p aem-forms-addon-sdk-<version>.zip aem-forms-addon-<version>.far > addon.far
unzip -l addon.far | grep adobe-xfaforms-common

unzip -p addon.far "com/adobe/forms/foundation/adobe-xfaforms-common/<version>/adobe-xfaforms-common-<version>.jar" > adobe-xfaforms-common.jar

mvn install:install-file -Dfile=adobe-xfaforms-common.jar -DgroupId=com.adobe.forms.foundation -DartifactId=adobe-xfaforms-common -Dversion=<version> -Dpackaging=jar -DgeneratePom=true

<dependency>
    <groupId>com.adobe.forms.foundation</groupId>
    <artifactId>adobe-xfaforms-common</artifactId>
    <version><SDK_DEPENDENCY_VERSION></version>
    <scope>provided</scope>
</dependency>

<PROJECT_ROOT>/core/src/main/java/com/example/forms/security/ClamAVFileAttachmentValidator.java

package com.example.forms.security;

import com.adobe.forms.common.service.FileAttachmentValidator;
import com.adobe.forms.common.service.FileAttachmentValidationResult;
import com.adobe.forms.common.service.FileAttachmentWrapper;
import org.osgi.service.component.annotations.Activate;
import org.osgi.service.component.annotations.Component;
import org.osgi.service.metatype.annotations.AttributeDefinition;
import org.osgi.service.metatype.annotations.Designate;
import org.osgi.service.metatype.annotations.ObjectClassDefinition;

import java.io.ByteArrayOutputStream;
import java.io.DataOutputStream;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.InetSocketAddress;
import java.net.Socket;
import java.nio.charset.StandardCharsets;

@Component(service = FileAttachmentValidator.class)
@Designate(ocd = ClamAVFileAttachmentValidator.Config.class)
public class ClamAVFileAttachmentValidator implements FileAttachmentValidator {

    @ObjectClassDefinition(name = "ClamAV File Attachment Scanner")
    public @interface Config {
        @AttributeDefinition(name = "clamd Host")
        String clamd_host() default "localhost";

        @AttributeDefinition(name = "clamd Port")
        int clamd_port() default 3310;

        @AttributeDefinition(name = "Scan Timeout (ms)")
        int clamd_timeout() default 30000;
    }

    private static final String VALIDATOR_NAME = "ClamAV Scanner";
    private static final int CHUNK_SIZE = 8192;

    private String host;
    private int port;
    private int timeout;

    @Activate
    protected void activate(Config config) {
        this.host = config.clamd_host();
        this.port = config.clamd_port();
        this.timeout = config.clamd_timeout();
    }

    @Override
    public FileAttachmentValidationResult validateFileAttachment(FileAttachmentWrapper wrapper) {

        if (wrapper == null) {
            return new FileAttachmentValidationResult(false, "No attachment was received.", wrapper);
        }

        byte[] content = wrapper.getValue();
        if (content == null || content.length == 0) {
            return new FileAttachmentValidationResult(false, "The attached file is empty.", wrapper);
        }

        try {
            String response = scan(content);

            if (response.endsWith("OK")) {
                return new FileAttachmentValidationResult(true, "File passed the virus scan.", wrapper);
            }
            if (response.contains("FOUND")) {
                return new FileAttachmentValidationResult(false,
                        "A virus was detected in the attached file. Upload was rejected.", wrapper);
            }
            return new FileAttachmentValidationResult(false,
                    "The file could not be scanned. Please try again later.", wrapper);

        } catch (Exception e) {
            // Fail closed: reject when clamd is unreachable rather than accept an unscanned file.
            return new FileAttachmentValidationResult(false,
                    "The virus scanner is unavailable. Please try again later.", wrapper);
        }
    }

    /**
     * Streams the file to clamd using the INSTREAM command and returns the daemon's response.
     */
    private String scan(byte[] data) throws Exception {
        try (Socket socket = new Socket()) {
            socket.connect(new InetSocketAddress(host, port), timeout);
            socket.setSoTimeout(timeout);

            try (OutputStream raw = socket.getOutputStream();
                 DataOutputStream out = new DataOutputStream(raw);
                 InputStream in = socket.getInputStream()) {

                out.writeBytes("zINSTREAM\0");

                for (int offset = 0; offset < data.length; offset += CHUNK_SIZE) {
                    int len = Math.min(CHUNK_SIZE, data.length - offset);
                    out.writeInt(len);
                    out.write(data, offset, len);
                }

                out.writeInt(0); // zero-length chunk signals end of stream
                out.flush();

                ByteArrayOutputStream responseBuffer = new ByteArrayOutputStream();
                byte[] buffer = new byte[512];
                int read;
                while ((read = in.read(buffer)) != -1) {
                    responseBuffer.write(buffer, 0, read);
                }
                return responseBuffer.toString(StandardCharsets.US_ASCII.name()).trim();
            }
        }
    }

    @Override
    public String getFileAttachmentValidatorName() {
        return VALIDATOR_NAME;
    }
}

cd <PROJECT_ROOT>
mvn clean install -PautoInstallBundle

http://localhost:4502/system/console/components

http://localhost:4502/system/console/configMgr

<PROJECT_ROOT>/ui.apps/src/main/content/jcr_root/apps/<APP_ID>/components/adaptiveForm/formcontainer/.content.xml

<?xml version="1.0" encoding="UTF-8"?>
<jcr:root xmlns:jcr="http://www.jcp.org/jcr/1.0" xmlns:sling="http://sling.apache.org/jcr/sling/1.0"
    jcr:primaryType="cq:Component"
    jcr:title="Form Container"
    sling:resourceSuperType="core/fd/components/form/container/v2/container"/>

<PROJECT_ROOT>/ui.apps/src/main/content/jcr_root/apps/<APP_ID>/components/adaptiveForm/formcontainer/_cq_dialog/.content.xml

<?xml version="1.0" encoding="UTF-8"?>
<jcr:root xmlns:jcr="http://www.jcp.org/jcr/1.0" xmlns:sling="http://sling.apache.org/jcr/sling/1.0"
    jcr:primaryType="nt:unstructured">
  <content jcr:primaryType="nt:unstructured">
    <items jcr:primaryType="nt:unstructured">
      <tabs jcr:primaryType="nt:unstructured">
        <items jcr:primaryType="nt:unstructured">
          <submitActions jcr:primaryType="nt:unstructured">
            <items jcr:primaryType="nt:unstructured">
              <columns jcr:primaryType="nt:unstructured">
                <items jcr:primaryType="nt:unstructured">
                  <fileAttachmentValidator
                      jcr:primaryType="nt:unstructured"
                      sling:resourceType="granite/ui/components/coral/foundation/form/select"
                      fieldLabel="File Attachment Virus Scanner/Validator"
                      fieldDescription="Select a registered validator configuration to scan submitted file attachments. Select None to disable validation for this form."
                      emptyText="None"
                      name="./fileAttachmentValidator">
                    <datasource
                        jcr:primaryType="nt:unstructured"
                        sling:resourceType="<APP_ID>/datasources/fileattachmentvalidators"/>
                  </fileAttachmentValidator>
                </items>
              </columns>
            </items>
          </submitActions>
        </items>
      </tabs>
    </items>
  </content>
</jcr:root>

<PROJECT_ROOT>/core/src/main/java/com/example/forms/security/FileAttachmentValidatorDataSourceServlet.java

package com.example.forms.security;

import com.adobe.forms.common.service.FileAttachmentValidator;
import com.adobe.forms.common.service.FileAttachmentValidatorManager;
import com.adobe.granite.ui.components.ds.DataSource;
import com.adobe.granite.ui.components.ds.SimpleDataSource;
import com.adobe.granite.ui.components.ds.ValueMapResource;
import org.apache.sling.api.SlingHttpServletRequest;
import org.apache.sling.api.SlingHttpServletResponse;
import org.apache.sling.api.resource.Resource;
import org.apache.sling.api.resource.ResourceMetadata;
import org.apache.sling.api.servlets.HttpConstants;
import org.apache.sling.api.servlets.SlingSafeMethodsServlet;
import org.apache.sling.api.wrappers.ValueMapDecorator;
import org.apache.sling.servlets.annotations.SlingServletResourceTypes;
import org.osgi.service.component.annotations.Component;
import org.osgi.service.component.annotations.Reference;
import org.osgi.service.component.annotations.ReferenceCardinality;
import org.osgi.service.component.annotations.ReferencePolicy;

import javax.servlet.Servlet;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

@Component(service = { Servlet.class })
@SlingServletResourceTypes(
        resourceTypes = "<APP_ID>/datasources/fileattachmentvalidators",
        methods = HttpConstants.METHOD_GET)
public class FileAttachmentValidatorDataSourceServlet extends SlingSafeMethodsServlet {

    @Reference(cardinality = ReferenceCardinality.OPTIONAL, policy = ReferencePolicy.DYNAMIC)
    private volatile FileAttachmentValidatorManager fileAttachmentValidatorManager;

    @Override
    protected void doGet(SlingHttpServletRequest request, SlingHttpServletResponse response) {
        List<Resource> options = new ArrayList<>();

        FileAttachmentValidatorManager manager = fileAttachmentValidatorManager;
        if (manager != null) {
            List<FileAttachmentValidator> validators = manager.getValidators();
            if (validators != null) {
                for (FileAttachmentValidator validator : validators) {
                    String name = validator.getFileAttachmentValidatorName();
                    if (name != null && !name.isEmpty()) {
                        options.add(createOption(request, name));
                    }
                }
            }
        }

        DataSource dataSource = new SimpleDataSource(options.iterator());
        request.setAttribute(DataSource.class.getName(), dataSource);
    }

    private Resource createOption(SlingHttpServletRequest request, String name) {
        Map<String, Object> props = new HashMap<>();
        props.put("value", name);
        props.put("text", name);
        return new ValueMapResource(request.getResourceResolver(), new ResourceMetadata(),
                "nt:unstructured", new ValueMapDecorator(props));
    }
}

cd <PROJECT_ROOT>
mvn clean install -PautoInstallPackage,autoInstallBundle

http://localhost:4502/aem/forms.html/content/dam/formsanddocuments

http://localhost:4502/content/dam/formsanddocuments/file-attachment-scanner-demo/jcr:content?wcmmode=disabled

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

<AEM_SDK_FOLDER>/crx-quickstart/logs/error.log