Merge pull request HXSecurity#476 from lostsnow/fix/request-response-body-fetch

add undertow servlet ServletPrintWriter response fetch

Author: lostsnow

dongtai-core/src/main/java/io/dongtai/iast/core/bytecode/enhance/plugin/framework/j2ee/dispatch/DispatchJ2ee.java

@@ -23,6 +23,7 @@ public class DispatchJ2ee implements DispatchPlugin {
     public static final String JAVAX_SERVLET_OUTPUT_STREAM = " javax.servlet.ServletOutputStream".substring(1);
     public static final String JAKARTA_SERVLET_OUTPUT_STREAM = " jakarta.servlet.ServletOutputStream".substring(1);
     public static final String APACHE_COYOTE_WRITER = " org.apache.catalina.connector.CoyoteWriter".substring(1);
+    public static final String UNDERTOW_SERVLET_WRITER = " io.undertow.servlet.spec.ServletPrintWriter".substring(1);
 
     @Override
     public ClassVisitor dispatch(ClassVisitor classVisitor, ClassContext context, Policy policy) {
@@ -41,7 +42,7 @@ public ClassVisitor dispatch(ClassVisitor classVisitor, ClassContext context, Po
             classVisitor = new ServletOutputStreamAdapter(classVisitor, context);
         } else if (ancestors.contains(JAKARTA_SERVLET_OUTPUT_STREAM)) {
             classVisitor = new ServletOutputStreamAdapter(classVisitor, context);
-        } else if (APACHE_COYOTE_WRITER.equals(className)) {
+        } else if (APACHE_COYOTE_WRITER.equals(className) || UNDERTOW_SERVLET_WRITER.equals(className)) {
             classVisitor = new PrintWriterAdapter(classVisitor, context);
         }
         return classVisitor;

dongtai-core/src/main/java/io/dongtai/iast/core/handler/hookpoint/models/policy/PolicyManager.java

@@ -21,6 +21,7 @@ public class PolicyManager {
             DispatchJ2ee.JAVAX_FACES_SERVLET,
             DispatchJ2ee.JAKARTA_FACES_SERVLET,
             DispatchJ2ee.APACHE_COYOTE_WRITER,
+            DispatchJ2ee.UNDERTOW_SERVLET_WRITER,
             " javax.servlet.jsp.JspPage".substring(1),
             " org.apache.jasper.runtime.HttpJspBase".substring(1),
             " org.springframework.web.servlet.FrameworkServlet".substring(1),