public class PDFSecurityUtil {

    private static final Logger log = LoggerFactory.getLogger(PDFSecurityUtil.class);
    
    // 定義惡意內(nèi)容模式庫
    private static final Pattern[] MALICIOUS_PATTERNS = {
            // HTML/JavaScript 注入模式
            Pattern.compile("<script.*?>", Pattern.CASE_INSENSITIVE),
            Pattern.compile("javascript:", Pattern.CASE_INSENSITIVE),
            Pattern.compile("vbscript:", Pattern.CASE_INSENSITIVE),
            
            // 事件處理函數(shù)
            Pattern.compile("onload\\s*=", Pattern.CASE_INSENSITIVE),
            Pattern.compile("onerror\\s*=", Pattern.CASE_INSENSITIVE),
            Pattern.compile("onclick\\s*=", Pattern.CASE_INSENSITIVE),
            
            // 危險(xiǎn)JavaScript函數(shù)
            Pattern.compile("eval\\s*\\(", Pattern.CASE_INSENSITIVE),
            Pattern.compile("alert\\s*\\(", Pattern.CASE_INSENSITIVE),
            Pattern.compile("document\\.cookie", Pattern.CASE_INSENSITIVE),
            
            // PDF JavaScript對象
            Pattern.compile("<</JS", Pattern.CASE_INSENSITIVE),
            Pattern.compile("/JS\\b", Pattern.CASE_INSENSITIVE),
            Pattern.compile("/JavaScript\\b", Pattern.CASE_INSENSITIVE),
            Pattern.compile("/S\\s+/JavaScript", Pattern.CASE_INSENSITIVE),
            
            // Adobe Acrobat JavaScript方法
            Pattern.compile("app\\.alert\\s*\\(", Pattern.CASE_INSENSITIVE),
            Pattern.compile("app\\.execMenuItem\\s*\\(", Pattern.CASE_INSENSITIVE),
            
            // PDF動作類型
            Pattern.compile("/AA\\b", Pattern.CASE_INSENSITIVE),        // 附加動作
            Pattern.compile("/OpenAction\\b", Pattern.CASE_INSENSITIVE), // 打開動作
            Pattern.compile("/Launch\\b", Pattern.CASE_INSENSITIVE),     // 啟動應(yīng)用程序
            Pattern.compile("/URI\\b", Pattern.CASE_INSENSITIVE),        // URI動作
            Pattern.compile("/GoToR\\b", Pattern.CASE_INSENSITIVE),      // 遠(yuǎn)程跳轉(zhuǎn)
            Pattern.compile("/SubmitForm\\b", Pattern.CASE_INSENSITIVE), // 表單提交
            
            // 系統(tǒng)命令執(zhí)行
            Pattern.compile("cmd\\.exe", Pattern.CASE_INSENSITIVE),
            Pattern.compile("/bin/sh", Pattern.CASE_INSENSITIVE),
            Pattern.compile("powershell", Pattern.CASE_INSENSITIVE),
            
            // 外部資源鏈接
            Pattern.compile("mailto:", Pattern.CASE_INSENSITIVE),
            Pattern.compile("ftp://", Pattern.CASE_INSENSITIVE),
            Pattern.compile("http://", Pattern.CASE_INSENSITIVE)
    };

    /**
     * 通過文件路徑驗(yàn)證PDF文件安全性
     *
     * @param filePath 文件路徑
     * @return 驗(yàn)證結(jié)果
     */
    public static boolean validatePDF(String filePath) {
        try {
            Path path = Paths.get(filePath);
            byte[] fileData = Files.readAllBytes(path);
            return validatePDF(fileData);
        } catch (IOException e) {
            log.error("讀取PDF文件失敗: {}", filePath, e);
            return false;
        }
    }

    /**
     * 驗(yàn)證PDF文件安全性
     *
     * @param fileData 文件字節(jié)數(shù)據(jù)
     * @return 驗(yàn)證結(jié)果
     */
    public static boolean validatePDF(byte[] fileData) {
        String content = extractTextFromPDF(fileData);
        if (containsMaliciousContent(content)) {
            return false;
        }
        return true;
    }

    /**
     * 從PDF中提取文本內(nèi)容
     * 注意：這是一個(gè)非?；A(chǔ)的實(shí)現(xiàn)，實(shí)際PDF解析要復(fù)雜得多
     */
    private static String extractTextFromPDF(byte[] fileData) {
        StringBuilder content = new StringBuilder();

        try (InputStream is = new ByteArrayInputStream(fileData);
             InputStreamReader isr = new InputStreamReader(is, StandardCharsets.ISO_8859_1);
             BufferedReader reader = new BufferedReader(isr)) {

            String line;
            while ((line = reader.readLine()) != null) {
                content.append(line).append("\n");
            }

        } catch (IOException e) {
            log.error("PDF文本提取失敗", e);
            return "";
        }

        return content.toString();
    }

    /**
     * 檢查是否包含惡意內(nèi)容
     */
    private static boolean containsMaliciousContent(String content) {
        for (Pattern pattern : MALICIOUS_PATTERNS) {
            if (pattern.matcher(content).find()) {
                log.error("檢測到惡意內(nèi)容: {}", pattern.pattern());
                return true;
            }
        }
        return containsPDFMaliciousContent(content);
    }

    private static boolean containsPDFMaliciousContent(String content) {
        // 檢查PDF JavaScript對象
        if (content.contains("/JS") || content.contains("/JavaScript")) {
            if (containsDangerousJSCode(content)) {
                return true;
            }
        }
        return false;
    }

    private static boolean containsDangerousJSCode(String content) {
        String[] dangerousJSPatterns = {
                "app.alert", "app.execMenuItem", "this.exportDataObject",
                "util.printd", "getURL", "submitForm", "eval(", "setInterval",
                "setTimeout", "XMLHttpRequest", "ActiveXObject", "WScript"
        };

        String lowerContent = content.toLowerCase();
        for (String pattern : dangerousJSPatterns) {
            if (lowerContent.contains(pattern.toLowerCase())) {
                log.error("檢測到危險(xiǎn)JS代碼: {}", pattern);
                return true;
            }
        }
        return false;
    }

    // 使用示例
    public static void main(String[] args) {
        String filePath = "D:\\test\\file.pdf";
        boolean ret = validatePDF(filePath);

        if (ret) {
            System.out.println("PDF 文件安全: " + filePath);
        } else {
            System.out.println("PDF 文件不安全: " + filePath);
        }
    }
}