Validate more entities' fields

common/data/src/main/java/org/thingsboard/server/common/data/DashboardInfo.java

@@ -19,14 +19,18 @@ import com.fasterxml.jackson.annotation.JsonProperty;
 import org.thingsboard.server.common.data.id.CustomerId;
 import org.thingsboard.server.common.data.id.DashboardId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
+import javax.validation.Valid;
 import java.util.HashSet;
 import java.util.Set;
 
 public class DashboardInfo extends SearchTextBased<DashboardId> implements HasName, HasTenantId {
 
     private TenantId tenantId;
+    @NoXss
     private String title;
+    @Valid
     private Set<ShortCustomerInfo> assignedCustomers;
 
     public DashboardInfo() {

common/data/src/main/java/org/thingsboard/server/common/data/ShortCustomerInfo.java

@@ -19,6 +19,7 @@ import lombok.AllArgsConstructor;
 import lombok.Getter;
 import lombok.Setter;
 import org.thingsboard.server.common.data.id.CustomerId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 /**
  * Created by igor on 2/27/18.
@@ -31,6 +32,7 @@ public class ShortCustomerInfo {
     private CustomerId customerId;
 
     @Getter @Setter
+    @NoXss
     private String title;
 
     @Getter @Setter

common/data/src/main/java/org/thingsboard/server/common/data/TbResource.java

@@ -19,6 +19,7 @@ import lombok.Data;
 import lombok.EqualsAndHashCode;
 import lombok.extern.slf4j.Slf4j;
 import org.thingsboard.server.common.data.id.TbResourceId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 @Slf4j
 @Data
@@ -27,6 +28,7 @@ public class TbResource extends TbResourceInfo {
 
     private static final long serialVersionUID = 7379609705527272306L;
 
+    @NoXss
     private String fileName;
 
     private String data;

common/data/src/main/java/org/thingsboard/server/common/data/TbResourceInfo.java

@@ -20,6 +20,7 @@ import lombok.EqualsAndHashCode;
 import lombok.extern.slf4j.Slf4j;
 import org.thingsboard.server.common.data.id.TbResourceId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 @Slf4j
 @Data
@@ -27,6 +28,7 @@ import org.thingsboard.server.common.data.id.TenantId;
 public class TbResourceInfo extends SearchTextBased<TbResourceId> implements HasTenantId {
 
     private TenantId tenantId;
+    @NoXss
     private String title;
     private ResourceType resourceType;
     private String resourceKey;

common/data/src/main/java/org/thingsboard/server/common/data/device/profile/DeviceProfileData.java

@@ -25,6 +25,7 @@ import java.util.List;
 public class DeviceProfileData implements Serializable {
 
     private DeviceProfileConfiguration configuration;
+    @Valid
     private DeviceProfileTransportConfiguration transportConfiguration;
     private DeviceProfileProvisionConfiguration provisionConfiguration;
     @Valid

common/data/src/main/java/org/thingsboard/server/common/data/device/profile/MqttDeviceProfileTransportConfiguration.java

@@ -17,11 +17,14 @@ package org.thingsboard.server.common.data.device.profile;
 
 import lombok.Data;
 import org.thingsboard.server.common.data.DeviceTransportType;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 @Data
 public class MqttDeviceProfileTransportConfiguration implements DeviceProfileTransportConfiguration {
 
+    @NoXss
     private String deviceTelemetryTopic = MqttTopics.DEVICE_TELEMETRY_TOPIC;
+    @NoXss
     private String deviceAttributesTopic = MqttTopics.DEVICE_ATTRIBUTES_TOPIC;
     private TransportPayloadTypeConfiguration transportPayloadTypeConfiguration;
 

common/data/src/main/java/org/thingsboard/server/common/data/widget/BaseWidgetType.java

@@ -20,6 +20,7 @@ import org.thingsboard.server.common.data.BaseData;
 import org.thingsboard.server.common.data.HasTenantId;
 import org.thingsboard.server.common.data.id.TenantId;
 import org.thingsboard.server.common.data.id.WidgetTypeId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 @Data
 public class BaseWidgetType extends BaseData<WidgetTypeId> implements HasTenantId {
@@ -27,8 +28,11 @@ public class BaseWidgetType extends BaseData<WidgetTypeId> implements HasTenantI
     private static final long serialVersionUID = 8388684344603660756L;
 
     private TenantId tenantId;
+    @NoXss
     private String bundleAlias;
+    @NoXss
     private String alias;
+    @NoXss
     private String name;
 
     public BaseWidgetType() {

common/data/src/main/java/org/thingsboard/server/common/data/widget/WidgetTypeDetails.java

@@ -15,14 +15,15 @@
  */
 package org.thingsboard.server.common.data.widget;
 
-import com.fasterxml.jackson.databind.JsonNode;
 import lombok.Data;
 import org.thingsboard.server.common.data.id.WidgetTypeId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 @Data
 public class WidgetTypeDetails extends WidgetType {
 
     private String image;
+    @NoXss
     private String description;
 
     public WidgetTypeDetails() {

common/data/src/main/java/org/thingsboard/server/common/data/widget/WidgetTypeInfo.java

@@ -17,12 +17,15 @@ package org.thingsboard.server.common.data.widget;
 
 import lombok.Data;
 import org.thingsboard.server.common.data.id.WidgetTypeId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 @Data
 public class WidgetTypeInfo extends BaseWidgetType {
 
     private String image;
+    @NoXss
     private String description;
+    @NoXss
     private String widgetType;
 
     public WidgetTypeInfo() {

common/data/src/main/java/org/thingsboard/server/common/data/widget/WidgetsBundle.java

@@ -19,6 +19,7 @@ import org.thingsboard.server.common.data.HasTenantId;
 import org.thingsboard.server.common.data.SearchTextBased;
 import org.thingsboard.server.common.data.id.TenantId;
 import org.thingsboard.server.common.data.id.WidgetsBundleId;
+import org.thingsboard.server.common.data.validation.NoXss;
 
 import java.util.Arrays;
 
@@ -27,9 +28,12 @@ public class WidgetsBundle extends SearchTextBased<WidgetsBundleId> implements H
     private static final long serialVersionUID = -7627368878362410489L;
 
     private TenantId tenantId;
+    @NoXss
     private String alias;
+    @NoXss
     private String title;
     private String image;
+    @NoXss
     private String description;
 
     public WidgetsBundle() {