You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@wookie.apache.org by ps...@apache.org on 2012/07/26 14:53:34 UTC

svn commit: r1365970 - in /incubator/wookie/trunk/src-tests/org/apache/wookie/tests: functional/ValidatorControllerTest.java server/security/MaliciousContentUploadTest.java

Author: psharples
Date: Thu Jul 26 12:53:34 2012
New Revision: 1365970

URL: http://svn.apache.org/viewvc?rev=1365970&view=rev
Log:
fix for tests when wookie is not running

Modified:
    incubator/wookie/trunk/src-tests/org/apache/wookie/tests/functional/ValidatorControllerTest.java
    incubator/wookie/trunk/src-tests/org/apache/wookie/tests/server/security/MaliciousContentUploadTest.java

Modified: incubator/wookie/trunk/src-tests/org/apache/wookie/tests/functional/ValidatorControllerTest.java
URL: http://svn.apache.org/viewvc/incubator/wookie/trunk/src-tests/org/apache/wookie/tests/functional/ValidatorControllerTest.java?rev=1365970&r1=1365969&r2=1365970&view=diff
==============================================================================
--- incubator/wookie/trunk/src-tests/org/apache/wookie/tests/functional/ValidatorControllerTest.java (original)
+++ incubator/wookie/trunk/src-tests/org/apache/wookie/tests/functional/ValidatorControllerTest.java Thu Jul 26 12:53:34 2012
@@ -19,6 +19,7 @@ import static org.junit.Assert.assertTru
 
 import java.io.File;
 import java.io.IOException;
+import java.net.ConnectException;
 
 import org.apache.commons.configuration.ConfigurationException;
 import org.apache.commons.httpclient.HttpClient;
@@ -43,135 +44,151 @@ public class ValidatorControllerTest ext
 
   @Test
   public void validateOkWidget() throws HttpException, IOException{
-    HttpClient client = new HttpClient();
-    
-    PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-    
-    //
-    // Use upload test widget
-    //
-    File file = new File("src-tests/testdata/upload-test-2.wgt");
-    assertTrue(file.exists());
-    
-    //
-    // Add test wgt file to POST
-    //
-    Part[] parts = { new FilePart(file.getName(), file) };
-    post.setRequestEntity(new MultipartRequestEntity(parts, post
-        .getParams()));
-
-    client.executeMethod(post);   
-    int code = post.getStatusCode();
-    if(shouldValidate){
-        assertEquals(200, code);
-    }else{
-        assertEquals(503, code);
+    try {
+        HttpClient client = new HttpClient();
+        
+        PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+        
+        //
+        // Use upload test widget
+        //
+        File file = new File("src-tests/testdata/upload-test-2.wgt");
+        assertTrue(file.exists());
+        
+        //
+        // Add test wgt file to POST
+        //
+        Part[] parts = { new FilePart(file.getName(), file) };
+        post.setRequestEntity(new MultipartRequestEntity(parts, post
+            .getParams()));
+
+        client.executeMethod(post);   
+        int code = post.getStatusCode();
+        if(shouldValidate){
+            assertEquals(200, code);
+        }else{
+            assertEquals(503, code);
+        }
+        //System.out.println(post.getResponseBodyAsString());
+        post.releaseConnection();
+        // ensure resources have been removed
+        File tempUploadFolder = new File(TEMPUPLOADFOLDER, "uploadtest_2");
+        assertFalse(tempUploadFolder.exists());
+        File uploadedWgt = new File(TEMPUPLOADFOLDER, "upload-test-2.wgt");
+        assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
     }
-    //System.out.println(post.getResponseBodyAsString());
-    post.releaseConnection();
-    // ensure resources have been removed
-    File tempUploadFolder = new File(TEMPUPLOADFOLDER, "uploadtest_2");
-    assertFalse(tempUploadFolder.exists());
-    File uploadedWgt = new File(TEMPUPLOADFOLDER, "upload-test-2.wgt");
-    assertFalse(uploadedWgt.exists());
   }
   
   @Test
   public void validateWidgetMissingStartPage() throws HttpException, IOException{
-    HttpClient client = new HttpClient();
-    
-    PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-    
-    File file = new File("src-tests/testdata/missing-start-page.wgt");
-    assertTrue(file.exists());
-    
-    //
-    // Add test wgt file to POST
-    //
-    Part[] parts = { new FilePart(file.getName(), file) };
-    post.setRequestEntity(new MultipartRequestEntity(parts, post
-        .getParams()));
-    
-    client.executeMethod(post);   
-    int code = post.getStatusCode();
-    // should be 400 - bad wgt package
-    if(shouldValidate){
-        assertEquals(400, code);
-    }else{
-        assertEquals(503, code);
+    try {
+        HttpClient client = new HttpClient();
+        
+        PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+        
+        File file = new File("src-tests/testdata/missing-start-page.wgt");
+        assertTrue(file.exists());
+        
+        //
+        // Add test wgt file to POST
+        //
+        Part[] parts = { new FilePart(file.getName(), file) };
+        post.setRequestEntity(new MultipartRequestEntity(parts, post
+            .getParams()));
+        
+        client.executeMethod(post);   
+        int code = post.getStatusCode();
+        // should be 400 - bad wgt package
+        if(shouldValidate){
+            assertEquals(400, code);
+        }else{
+            assertEquals(503, code);
+        }
+        //System.out.println(post.getResponseBodyAsString());
+        post.releaseConnection();
+        // ensure resources have been removed
+        File tempUploadFolder = new File(TEMPUPLOADFOLDER, "invalid-widget-no-start-page");
+        assertFalse(tempUploadFolder.exists());
+        File uploadedWgt = new File(TEMPUPLOADFOLDER, "missing-start-page.wgt");
+        assertFalse(uploadedWgt.exists());
+    } catch (Exception e) {
+        // TODO Auto-generated catch block
     }
-    //System.out.println(post.getResponseBodyAsString());
-    post.releaseConnection();
-    // ensure resources have been removed
-    File tempUploadFolder = new File(TEMPUPLOADFOLDER, "invalid-widget-no-start-page");
-    assertFalse(tempUploadFolder.exists());
-    File uploadedWgt = new File(TEMPUPLOADFOLDER, "missing-start-page.wgt");
-    assertFalse(uploadedWgt.exists());
   }
   
   @Test
   public void validateWidgetMissingConfigDotXml() throws HttpException, IOException{
-    HttpClient client = new HttpClient();
-    
-    PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-    
-    File file = new File("src-tests/testdata/missing-config.wgt");
-    assertTrue(file.exists());
-    
-    //
-    // Add test wgt file to POST
-    //
-    Part[] parts = { new FilePart(file.getName(), file) };
-    post.setRequestEntity(new MultipartRequestEntity(parts, post
-        .getParams()));
-    
-    client.executeMethod(post);   
-    int code = post.getStatusCode();
-    // should be 400 - bad wgt package
-    if(shouldValidate){
-        assertEquals(400, code);
-    }else{
-        assertEquals(503, code);
+    try {
+        HttpClient client = new HttpClient();
+        
+        PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+        
+        File file = new File("src-tests/testdata/missing-config.wgt");
+        assertTrue(file.exists());
+        
+        //
+        // Add test wgt file to POST
+        //
+        Part[] parts = { new FilePart(file.getName(), file) };
+        post.setRequestEntity(new MultipartRequestEntity(parts, post
+            .getParams()));
+        
+        client.executeMethod(post);   
+        int code = post.getStatusCode();
+        // should be 400 - bad wgt package
+        if(shouldValidate){
+            assertEquals(400, code);
+        }else{
+            assertEquals(503, code);
+        }
+        //System.out.println(post.getResponseBodyAsString());
+        post.releaseConnection();
+        // ensure resources have been removed
+        // no unpacked folder should have been created this time
+        // remove original wgt upload
+        File uploadedWgt = new File(TEMPUPLOADFOLDER, "missing-config.wgt");
+        assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
     }
-    //System.out.println(post.getResponseBodyAsString());
-    post.releaseConnection();
-    // ensure resources have been removed
-    // no unpacked folder should have been created this time
-    // remove original wgt upload
-    File uploadedWgt = new File(TEMPUPLOADFOLDER, "missing-config.wgt");
-    assertFalse(uploadedWgt.exists());
   }
   
   @Test
   public void validateWidgetInvalidXmlMarkup() throws HttpException, IOException{
-    HttpClient client = new HttpClient();
-    
-    PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-    
-    File file = new File("src-tests/testdata/invalid-xml.wgt");
-    assertTrue(file.exists());
-    
-    //
-    // Add test wgt file to POST
-    //
-    Part[] parts = { new FilePart(file.getName(), file) };
-    post.setRequestEntity(new MultipartRequestEntity(parts, post
-        .getParams()));
-    
-    client.executeMethod(post);   
-    int code = post.getStatusCode();
-    // should be 400 - bad wgt package
-    if(shouldValidate){
-        assertEquals(400, code);
-    }else{
-        assertEquals(503, code);
+    try {
+        HttpClient client = new HttpClient();
+        
+        PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+        
+        File file = new File("src-tests/testdata/invalid-xml.wgt");
+        assertTrue(file.exists());
+        
+        //
+        // Add test wgt file to POST
+        //
+        Part[] parts = { new FilePart(file.getName(), file) };
+        post.setRequestEntity(new MultipartRequestEntity(parts, post
+            .getParams()));
+        
+        client.executeMethod(post);   
+        int code = post.getStatusCode();
+        // should be 400 - bad wgt package
+        if(shouldValidate){
+            assertEquals(400, code);
+        }else{
+            assertEquals(503, code);
+        }
+        //System.out.println(post.getResponseBodyAsString());
+        post.releaseConnection();
+        // ensure resources have been removed
+        // no unpacked folder should have been created this time
+        // remove original wgt upload
+        File uploadedWgt = new File(TEMPUPLOADFOLDER, "invalid-xml.wgt");
+        assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
     }
-    //System.out.println(post.getResponseBodyAsString());
-    post.releaseConnection();
-    // ensure resources have been removed
-    // no unpacked folder should have been created this time
-    // remove original wgt upload
-    File uploadedWgt = new File(TEMPUPLOADFOLDER, "invalid-xml.wgt");
-    assertFalse(uploadedWgt.exists());
   }
 }
\ No newline at end of file

Modified: incubator/wookie/trunk/src-tests/org/apache/wookie/tests/server/security/MaliciousContentUploadTest.java
URL: http://svn.apache.org/viewvc/incubator/wookie/trunk/src-tests/org/apache/wookie/tests/server/security/MaliciousContentUploadTest.java?rev=1365970&r1=1365969&r2=1365970&view=diff
==============================================================================
--- incubator/wookie/trunk/src-tests/org/apache/wookie/tests/server/security/MaliciousContentUploadTest.java (original)
+++ incubator/wookie/trunk/src-tests/org/apache/wookie/tests/server/security/MaliciousContentUploadTest.java Thu Jul 26 12:53:34 2012
@@ -42,208 +42,233 @@ public class MaliciousContentUploadTest 
     public static void tearDown() throws HttpException, IOException{}
 
     @Test
-    public void testNoExecutableInUploadFolder() throws HttpException, IOException, ConnectException{
-      HttpClient client = new HttpClient();
-      
-      PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-      
-      //
-      // Use upload test widget
-      //
-      File file = new File("src-tests/testdata/security-tests/binary.exe");
-      assertTrue(file.exists());
-      
-      //
-      // Add test binary file to POST
-      //
-      Part[] parts = { new FilePart(file.getName(), file) };
-      post.setRequestEntity(new MultipartRequestEntity(parts, post
-          .getParams()));
-
-      client.executeMethod(post);   
-      int code = post.getStatusCode();
-      // should be 400 - bad wgt package
-      if(shouldValidate){
-          assertEquals(400, code);
-      }else{
-          assertEquals(503, code);
-      }
-      //System.out.println(post.getResponseBodyAsString());
-      post.releaseConnection();
-      // ensure no binary.exe in temp folder
-      File uploadedWgt = new File(TEMPUPLOADFOLDER, "binary.exe");
-      assertFalse(uploadedWgt.exists());
+    public void testNoExecutableInUploadFolder() throws HttpException, IOException{
+      try {
+        HttpClient client = new HttpClient();
+          
+          PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+          
+          //
+          // Use upload test widget
+          //
+          File file = new File("src-tests/testdata/security-tests/binary.exe");
+          assertTrue(file.exists());
+          
+          //
+          // Add test binary file to POST
+          //
+          Part[] parts = { new FilePart(file.getName(), file) };
+          post.setRequestEntity(new MultipartRequestEntity(parts, post
+              .getParams()));
+
+          client.executeMethod(post);   
+          int code = post.getStatusCode();
+          // should be 400 - bad wgt package
+          if(shouldValidate){
+              assertEquals(400, code);
+          }else{
+              assertEquals(503, code);
+          }
+          //System.out.println(post.getResponseBodyAsString());
+          post.releaseConnection();
+          // ensure no binary.exe in temp folder
+          File uploadedWgt = new File(TEMPUPLOADFOLDER, "binary.exe");
+          assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // can't connect to server
+    }
     }
     
     @Test
-    public void testNoJspInUploadFolder() throws HttpException, IOException, ConnectException{
-      HttpClient client = new HttpClient();
-      
-      PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-      
-      //
-      // Use upload test widget
-      //
-      File file = new File("src-tests/testdata/security-tests/jsp.jsp");
-      assertTrue(file.exists());
-      
-      //
-      // Add test binary file to POST
-      //
-      Part[] parts = { new FilePart(file.getName(), file) };
-      post.setRequestEntity(new MultipartRequestEntity(parts, post
-          .getParams()));
-
-      client.executeMethod(post);   
-      int code = post.getStatusCode();
-      // should be 400 - bad wgt package
-      if(shouldValidate){
-          assertEquals(400, code);
-      }else{
-          assertEquals(503, code);
-      }
-      //System.out.println(post.getResponseBodyAsString());
-      post.releaseConnection();
-      // ensure no jsp.jsp in temp folder
-      File uploadedWgt = new File(TEMPUPLOADFOLDER, "jsp.jsp");
-      assertFalse(uploadedWgt.exists());
+    public void testNoJspInUploadFolder() throws HttpException, IOException{
+      try {
+        HttpClient client = new HttpClient();
+          
+          PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+          
+          //
+          // Use upload test widget
+          //
+          File file = new File("src-tests/testdata/security-tests/jsp.jsp");
+          assertTrue(file.exists());
+          
+          //
+          // Add test binary file to POST
+          //
+          Part[] parts = { new FilePart(file.getName(), file) };
+          post.setRequestEntity(new MultipartRequestEntity(parts, post
+              .getParams()));
+
+          client.executeMethod(post);   
+          int code = post.getStatusCode();
+          // should be 400 - bad wgt package
+          if(shouldValidate){
+              assertEquals(400, code);
+          }else{
+              assertEquals(503, code);
+          }
+          //System.out.println(post.getResponseBodyAsString());
+          post.releaseConnection();
+          // ensure no jsp.jsp in temp folder
+          File uploadedWgt = new File(TEMPUPLOADFOLDER, "jsp.jsp");
+          assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
+    }
     }
     
     @Test
-    public void testNoBatchFileInUploadFolder() throws HttpException, IOException, ConnectException{
-      HttpClient client = new HttpClient();
-      
-      PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-      
-      //
-      // Use upload test widget
-      //
-      File file = new File("src-tests/testdata/security-tests/script.bat");
-      assertTrue(file.exists());
-      
-      //
-      // Add test binary file to POST
-      //
-      Part[] parts = { new FilePart(file.getName(), file) };
-      post.setRequestEntity(new MultipartRequestEntity(parts, post
-          .getParams()));
-
-      client.executeMethod(post);   
-      int code = post.getStatusCode();
-      // should be 400 - bad wgt package
-      if(shouldValidate){
-          assertEquals(400, code);
-      }else{
-          assertEquals(503, code);
-      }
-      //System.out.println(post.getResponseBodyAsString());
-      post.releaseConnection();
-      // ensure no script.bat in temp folder
-      File uploadedWgt = new File(TEMPUPLOADFOLDER, "script.bat");
-      assertFalse(uploadedWgt.exists());
+    public void testNoBatchFileInUploadFolder() throws HttpException, IOException{
+      try {
+        HttpClient client = new HttpClient();
+          
+          PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+          
+          //
+          // Use upload test widget
+          //
+          File file = new File("src-tests/testdata/security-tests/script.bat");
+          assertTrue(file.exists());
+          
+          //
+          // Add test binary file to POST
+          //
+          Part[] parts = { new FilePart(file.getName(), file) };
+          post.setRequestEntity(new MultipartRequestEntity(parts, post
+              .getParams()));
+
+          client.executeMethod(post);   
+          int code = post.getStatusCode();
+          // should be 400 - bad wgt package
+          if(shouldValidate){
+              assertEquals(400, code);
+          }else{
+              assertEquals(503, code);
+          }
+          //System.out.println(post.getResponseBodyAsString());
+          post.releaseConnection();
+          // ensure no script.bat in temp folder
+          File uploadedWgt = new File(TEMPUPLOADFOLDER, "script.bat");
+          assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
+        e.printStackTrace();
+    }
     }
     
     @Test
-    public void testNoScriptFileInUploadFolder() throws HttpException, IOException, ConnectException{
-      HttpClient client = new HttpClient();
-      
-      PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-      
-      //
-      // Use upload test widget
-      //
-      File file = new File("src-tests/testdata/security-tests/script.sh");
-      assertTrue(file.exists());
-      
-      //
-      // Add test binary file to POST
-      //
-      Part[] parts = { new FilePart(file.getName(), file) };
-      post.setRequestEntity(new MultipartRequestEntity(parts, post
-          .getParams()));
-
-      client.executeMethod(post);   
-      int code = post.getStatusCode();
-      // should be 400 - bad wgt package
-      if(shouldValidate){
-          assertEquals(400, code);
-      }else{
-          assertEquals(503, code);
-      }
-      //System.out.println(post.getResponseBodyAsString());
-      post.releaseConnection();
-      // ensure no script.sh in temp folder
-      File uploadedWgt = new File(TEMPUPLOADFOLDER, "script.sh");
-      assertFalse(uploadedWgt.exists());
-    }
-
-    @Test
-    public void testUploadMaliciousWidgetNoManifest() throws HttpException, IOException, ConnectException{
-      HttpClient client = new HttpClient();
-      
-      PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-      
-      //
-      // Use upload test widget
-      //
-      File file = new File("src-tests/testdata/security-tests/widget-with-malicious-code-no-manifest.wgt");
-      assertTrue(file.exists());
-      
-      //
-      // Add test binary file to POST
-      //
-      Part[] parts = { new FilePart(file.getName(), file) };
-      post.setRequestEntity(new MultipartRequestEntity(parts, post
-          .getParams()));
-
-      client.executeMethod(post);   
-      int code = post.getStatusCode();
-      // should be 400 - bad wgt package
-      if(shouldValidate){
-          assertEquals(400, code);
-      }else{
-          assertEquals(503, code);
-      }
-      //System.out.println(post.getResponseBodyAsString());
-      post.releaseConnection();
-      // ensure resources are removed
-      File uploadedWgt = new File(TEMPUPLOADFOLDER, "widget-with-malicious-code-no-manifest.wgt");
-      assertFalse(uploadedWgt.exists());
+    public void testNoScriptFileInUploadFolder() throws HttpException, IOException{
+      try {
+        HttpClient client = new HttpClient();
+          
+          PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+          
+          //
+          // Use upload test widget
+          //
+          File file = new File("src-tests/testdata/security-tests/script.sh");
+          assertTrue(file.exists());
+          
+          //
+          // Add test binary file to POST
+          //
+          Part[] parts = { new FilePart(file.getName(), file) };
+          post.setRequestEntity(new MultipartRequestEntity(parts, post
+              .getParams()));
+
+          client.executeMethod(post);   
+          int code = post.getStatusCode();
+          // should be 400 - bad wgt package
+          if(shouldValidate){
+              assertEquals(400, code);
+          }else{
+              assertEquals(503, code);
+          }
+          //System.out.println(post.getResponseBodyAsString());
+          post.releaseConnection();
+          // ensure no script.sh in temp folder
+          File uploadedWgt = new File(TEMPUPLOADFOLDER, "script.sh");
+          assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
+    }
+    }
+
+    @Test
+    public void testUploadMaliciousWidgetNoManifest() throws HttpException, IOException{
+      try {
+        HttpClient client = new HttpClient();
+          
+          PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+          
+          //
+          // Use upload test widget
+          //
+          File file = new File("src-tests/testdata/security-tests/widget-with-malicious-code-no-manifest.wgt");
+          assertTrue(file.exists());
+          
+          //
+          // Add test binary file to POST
+          //
+          Part[] parts = { new FilePart(file.getName(), file) };
+          post.setRequestEntity(new MultipartRequestEntity(parts, post
+              .getParams()));
+
+          client.executeMethod(post);   
+          int code = post.getStatusCode();
+          // should be 400 - bad wgt package
+          if(shouldValidate){
+              assertEquals(400, code);
+          }else{
+              assertEquals(503, code);
+          }
+          //System.out.println(post.getResponseBodyAsString());
+          post.releaseConnection();
+          // ensure resources are removed
+          File uploadedWgt = new File(TEMPUPLOADFOLDER, "widget-with-malicious-code-no-manifest.wgt");
+          assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
+    }
     }
     
     @Test
-    public void testUploadMaliciousWidgetWithManifest() throws HttpException, IOException, ConnectException{
-      HttpClient client = new HttpClient();
-      
-      PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
-      
-      //
-      // Use upload test widget
-      //
-      File file = new File("src-tests/testdata/security-tests/widget-with-malicious-code-with-manifest.wgt");
-      assertTrue(file.exists());
-      
-      //
-      // Add test binary file to POST
-      //
-      Part[] parts = { new FilePart(file.getName(), file) };
-      post.setRequestEntity(new MultipartRequestEntity(parts, post
-          .getParams()));
-
-      client.executeMethod(post);   
-      int code = post.getStatusCode();
-      // should be 200
-      if(shouldValidate){
-          assertEquals(200, code);
-      }else{
-          assertEquals(503, code);
-      }
-      //System.out.println(post.getResponseBodyAsString());
-      post.releaseConnection();
-      // ensure resources are removed
-      File tempUploadFolder = new File(TEMPUPLOADFOLDER, "pretend-malicious-package");
-      assertFalse(tempUploadFolder.exists());
-      File uploadedWgt = new File(TEMPUPLOADFOLDER, "widget-with-malicious-code-with-manifest.wgt");
-      assertFalse(uploadedWgt.exists());
+    public void testUploadMaliciousWidgetWithManifest() throws HttpException, IOException{
+      try {
+        HttpClient client = new HttpClient();
+          
+          PostMethod post = new PostMethod(TEST_VALIDATOR_SERVICE_URL_VALID);
+          
+          //
+          // Use upload test widget
+          //
+          File file = new File("src-tests/testdata/security-tests/widget-with-malicious-code-with-manifest.wgt");
+          assertTrue(file.exists());
+          
+          //
+          // Add test binary file to POST
+          //
+          Part[] parts = { new FilePart(file.getName(), file) };
+          post.setRequestEntity(new MultipartRequestEntity(parts, post
+              .getParams()));
+
+          client.executeMethod(post);   
+          int code = post.getStatusCode();
+          // should be 200
+          if(shouldValidate){
+              assertEquals(200, code);
+          }else{
+              assertEquals(503, code);
+          }
+          //System.out.println(post.getResponseBodyAsString());
+          post.releaseConnection();
+          // ensure resources are removed
+          File tempUploadFolder = new File(TEMPUPLOADFOLDER, "pretend-malicious-package");
+          assertFalse(tempUploadFolder.exists());
+          File uploadedWgt = new File(TEMPUPLOADFOLDER, "widget-with-malicious-code-with-manifest.wgt");
+          assertFalse(uploadedWgt.exists());
+    } catch (ConnectException e) {
+        // TODO Auto-generated catch block
+    }
     }
 }