Skip to content

fix[BISERVER-15545]: enhance doSetMetadata to handle invalid or unparseable XML payloads (#6251)#6255

Merged
joana-fb merged 1 commit into
10.2from
SP-7195-2
May 29, 2026
Merged

fix[BISERVER-15545]: enhance doSetMetadata to handle invalid or unparseable XML payloads (#6251)#6255
joana-fb merged 1 commit into
10.2from
SP-7195-2

Conversation

@joana-fb

Copy link
Copy Markdown
Contributor

original PR: #6251
@pentaho/tatooine_dev

Copilot AI review requested due to automatic review settings May 29, 2026 11:07
@joana-fb joana-fb requested a review from a team as a code owner May 29, 2026 11:07

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the XML metadata update endpoint to classify missing or unparseable XML payloads as unsupported media type responses instead of server errors.

Changes:

  • Adds 415 handling for missing/null XML payloads and XML unmarshalling/parsing failures.
  • Extracts XML unmarshalling and stream-closing logic into helper methods.
  • Updates the XXE metadata test expectation from 500 to 415.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
extensions/src/main/java/org/pentaho/platform/web/http/api/resources/FileResource.java Adds XML payload validation/error handling and updates REST status documentation.
extensions/src/test/java/org/pentaho/platform/web/http/api/resources/FileResourceTest.java Updates the XXE metadata test to expect HTTP 415.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +2142 to +2143
if ( metadataXml == null ) {
return Response.status( Response.Status.UNSUPPORTED_MEDIA_TYPE ).entity( "Missing XML payload." ).build();
@hitachivantarasonarqube

Copy link
Copy Markdown

Failed Quality Gate failed

  • 72.70% Coverage on New Code (is less than 80.00%)

Project ID: pentaho:pentaho-platform-ce-parent

View in SonarQube

@buildguy

Copy link
Copy Markdown
Collaborator

👍 Frogbot scanned this pull request and did not find any new security issues.

Note:

Frogbot also supports Contextual Analysis, Secret Detection, IaC and SAST Vulnerabilities Scanning. This features are included as part of the JFrog Advanced Security package, which isn't enabled on your system.


@buildguy

Copy link
Copy Markdown
Collaborator

✅ Build finished in 41m 6s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -pl extensions

👌 All tests passed!

Tests run: 1656, Failures: 0, Skipped: 5    Test Results


ℹ️ This is an automatic message

@joana-fb joana-fb merged commit c7aeb43 into 10.2 May 29, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants