/*

 * Copyright (c) 2018, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

/**

 * @test

 * @bug 8210496

 * @modules java.base/jdk.internal.reflect

 * @run testng Filtering

 * @summary Test that security sensitive fields that filtered by core reflection

 */

import java.lang.reflect.*;

import java.lang.invoke.MethodHandles.Lookup;

import org.testng.annotations.DataProvider;

import org.testng.annotations.Test;

import static org.testng.Assert.assertTrue;

public class Filtering {

    @DataProvider(name = "sensitiveClasses")

    private Object[][] sensitiveClasses() {

        return new Object[][]{

            { jdk.internal.reflect.Reflection.class, null },

            { AccessibleObject.class, null },

            { ClassLoader.class, null },

            { Constructor.class, null },

            { Field.class, null },

            { Method.class, null },

        };

    }

    @DataProvider(name = "sensitiveFields")

    private Object[][] sensitiveFields() {

        return new Object[][]{

            { AccessibleObject.class, "override" },

            { Class.class, "classLoader" },

            { ClassLoader.class, "parent" },

            { Field.class, "clazz" },

            { Field.class, "modifiers" },

            { Lookup.class, "lookupClass" },

            { Lookup.class, "allowedModes" },

            { Method.class, "clazz" },

            { Method.class, "modifiers" },

            { System.class, "security" },

        };

    }

    @Test(dataProvider = "sensitiveClasses")

    public void testClass(Class<?> clazz, Object ignore) throws Exception {

        Field[] fields = clazz.getDeclaredFields();

        assertTrue(fields.length == 0);

    }

    @Test(dataProvider = "sensitiveFields",

          expectedExceptions = NoSuchFieldException.class)

    public void testField(Class<?> clazz, String name) throws Exception {

        clazz.getDeclaredField(name);

    }

}