public HttpServletRequest newRequestWrapper()

in wicket-core/src/main/java/org/apache/wicket/protocol/http/servlet/XForwardedRequestWrapperFactory.java [660:763]
90 lines of code
13 McCabe index (conditional complexity)

	public HttpServletRequest newRequestWrapper(final HttpServletRequest request)
	{
		String remoteIp = null;

		// In java 6, proxiesHeaderValue should be declared as a java.util.Deque
		LinkedList<String> proxiesHeaderValue = new LinkedList<String>();

		String[] remoteIPHeaderValue = commaDelimitedListToStringArray(request.getHeader(config.remoteIPHeader));

		// loop on remoteIPHeaderValue to find the first trusted remote ip and to build the
		// proxies chain
		int idx;
		for (idx = remoteIPHeaderValue.length - 1; idx >= 0; idx--)
		{
			String currentRemoteIp = remoteIPHeaderValue[idx];
			remoteIp = currentRemoteIp;
			if (matchesOne(currentRemoteIp, config.allowedInternalProxies))
			{
				// do nothing, allowedInternalProxies IPs are not appended to the
			}
			else if (matchesOne(currentRemoteIp, config.trustedProxies))
			{
				proxiesHeaderValue.addFirst(currentRemoteIp);
			}
			else
			{
				idx--; // decrement idx because break statement doesn't do it
				break;
			}
		}

		// continue to loop on remoteIPHeaderValue to build the new value of the remoteIPHeader
		LinkedList<String> newRemoteIpHeaderValue = new LinkedList<String>();
		for (; idx >= 0; idx--)
		{
			String currentRemoteIp = remoteIPHeaderValue[idx];
			newRemoteIpHeaderValue.addFirst(currentRemoteIp);
		}

		XForwardedRequestWrapper xRequest = new XForwardedRequestWrapper(request);
		if (remoteIp != null)
		{
			xRequest.setRemoteAddr(remoteIp);
			xRequest.setRemoteHost(remoteIp);

			if (proxiesHeaderValue.size() == 0)
			{
				xRequest.removeHeader(config.proxiesHeader);
			}
			else
			{
				String commaDelimitedListOfProxies = listToCommaDelimitedString(proxiesHeaderValue);
				xRequest.setHeader(config.proxiesHeader, commaDelimitedListOfProxies);
			}
			if (newRemoteIpHeaderValue.size() == 0)
			{
				xRequest.removeHeader(config.remoteIPHeader);
			}
			else
			{
				String commaDelimitedRemoteIpHeaderValue = listToCommaDelimitedString(newRemoteIpHeaderValue);
				xRequest.setHeader(config.remoteIPHeader, commaDelimitedRemoteIpHeaderValue);
			}
		}

		if (config.protocolHeader != null)
		{
			String protocolHeaderValue = request.getHeader(config.protocolHeader);
			if (protocolHeaderValue == null)
			{
				// don't modify the secure,scheme and serverPort attributes of the request
			}
			else if (config.protocolHeaderSslValue.equalsIgnoreCase(protocolHeaderValue))
			{
				xRequest.setSecure(true);
				xRequest.setScheme("https");
				xRequest.setServerPort(config.httpsServerPort);
			}
			else
			{
				xRequest.setSecure(false);
				xRequest.setScheme("http");
				xRequest.setServerPort(config.httpServerPort);
			}
		}

		if (log.isDebugEnabled())
		{
			log.debug("Incoming request " + request.getRequestURI() + " with originalRemoteAddr '" +
				request.getRemoteAddr() + "', originalRemoteHost='" + request.getRemoteHost() +
				"', originalSecure='" + request.isSecure() + "', originalScheme='" +
				request.getScheme() + "', original[" + config.remoteIPHeader + "]='" +
				request.getHeader(config.remoteIPHeader) + ", original[" + config.protocolHeader +
				"]='" +
				(config.protocolHeader == null ? null : request.getHeader(config.protocolHeader)) +
				"' will be seen as newRemoteAddr='" + xRequest.getRemoteAddr() +
				"', newRemoteHost='" + xRequest.getRemoteHost() + "', newScheme='" +
				xRequest.getScheme() + "', newSecure='" + xRequest.isSecure() + "', new[" +
				config.remoteIPHeader + "]='" + xRequest.getHeader(config.remoteIPHeader) +
				", new[" + config.proxiesHeader + "]='" + xRequest.getHeader(config.proxiesHeader) +
				"'");
		}
		return xRequest;
	}