fixed formatting

Author: bkollmar

addOns/ascanrules/src/main/java/org/zaproxy/zap/extension/ascanrules/SstiScanRule.java

@@ -413,7 +413,8 @@ private void searchForMathsExecution(
 
                         for (SinkPoint sink : sinksToTest) {
 
-                            String output = sink.getCurrentStateInString(newMsg, paramName, renderTest);
+                            String output =
+                                    sink.getCurrentStateInString(newMsg, paramName, renderTest);
 
                             for (String renderResult : renderExpectedResults) {
                                 // Some rendering tests add html tags so we can not only search for
@@ -432,7 +433,8 @@ private void searchForMathsExecution(
 
                                 if (output.contains(renderResult)
                                         && output.matches(regex)
-                                        && sstiPayload.engineSpecificCheck(regex, output, renderTest)) {
+                                        && sstiPayload.engineSpecificCheck(
+                                                regex, output, renderTest)) {
 
                                     String attack = getOtherInfo(sink.getLocation(), output);
 
@@ -452,49 +454,76 @@ private void searchForMathsExecution(
                         try {
                             for (TemplateFormat format : TEMPLATE_FORMATS) {
                                 // Construct the SSTI payload
-                                String sstiPayload2 = "zapSSTI'%s7*7%s'".formatted(format.getStartTag(), format.getEndTag());
-                
+                                String sstiPayload2 =
+                                        "zapSSTI'%s7*7%s'"
+                                                .formatted(
+                                                        format.getStartTag(), format.getEndTag());
+
                                 // Create a new POST request
                                 HttpMessage postMsg = getNewMsg();
                                 postMsg.getRequestHeader().setMethod("POST");
                                 postMsg.getRequestHeader()
-                                        .setHeader("Content-Type", "application/x-www-form-urlencoded");
-                
+                                        .setHeader(
+                                                "Content-Type",
+                                                "application/x-www-form-urlencoded");
+
                                 // Manually set the body to prevent url-encoding
                                 String requestBody = paramName + "=" + sstiPayload2;
                                 postMsg.setRequestBody(requestBody);
-                                postMsg.getRequestHeader().setContentLength(postMsg.getRequestBody().length());
-                
+                                postMsg.getRequestHeader()
+                                        .setContentLength(postMsg.getRequestBody().length());
+
                                 sendAndReceive(postMsg, false); // Send the raw POST request
-                
+
                                 // Now send a GET request to check if SSTI execution occurred
-                                HttpMessage getProfileMsg = new HttpMessage(postMsg.getRequestHeader().getURI());
+                                HttpMessage getProfileMsg =
+                                        new HttpMessage(postMsg.getRequestHeader().getURI());
                                 getProfileMsg.getRequestHeader().setMethod("GET");
-                
+
                                 // Preserve authentication/session details
-                                getProfileMsg.getRequestHeader().setHeader("User-Agent", postMsg.getRequestHeader().getHeader("User-Agent"));
-                                getProfileMsg.getRequestHeader().setHeader("Cookie", postMsg.getRequestHeader().getHeader("Cookie"));
-                                getProfileMsg.getRequestHeader().setHeader("Referer", postMsg.getRequestHeader().getURI().toString());
-                                getProfileMsg.getRequestHeader().setHeader("Origin", postMsg.getRequestHeader().getHostName());
-                
+                                getProfileMsg
+                                        .getRequestHeader()
+                                        .setHeader(
+                                                "User-Agent",
+                                                postMsg.getRequestHeader().getHeader("User-Agent"));
+                                getProfileMsg
+                                        .getRequestHeader()
+                                        .setHeader(
+                                                "Cookie",
+                                                postMsg.getRequestHeader().getHeader("Cookie"));
+                                getProfileMsg
+                                        .getRequestHeader()
+                                        .setHeader(
+                                                "Referer",
+                                                postMsg.getRequestHeader().getURI().toString());
+                                getProfileMsg
+                                        .getRequestHeader()
+                                        .setHeader(
+                                                "Origin", postMsg.getRequestHeader().getHostName());
+
                                 sendAndReceive(getProfileMsg, false); // Fetch profile page
-                
+
                                 String responseBody = getProfileMsg.getResponseBody().toString();
-                
-                                if (responseBody.contains("zapSSTI'49'")) { // Check if SSTI was executed
-                                    createAlert(newMsg.getRequestHeader().getURI().toString(),paramName,renderTest,sstiPayload2)
+
+                                if (responseBody.contains(
+                                        "zapSSTI'49'")) { // Check if SSTI was executed
+                                    createAlert(
+                                                    newMsg.getRequestHeader().getURI().toString(),
+                                                    paramName,
+                                                    renderTest,
+                                                    sstiPayload2)
                                             .setMessage(newMsg)
                                             .raise();
                                     found = true;
                                     break;
                                 }
                             }
-                
+
                         } catch (IOException e) {
                             LOGGER.warn("Failed to send SSTI test requests: ", e);
                         }
-                }
-                    
+                    }
+
                 } catch (SocketException ex) {
                     LOGGER.debug("Caught {} {}", ex.getClass().getName(), ex.getMessage());
                 } catch (IOException ex) {