*
     * @param protocol the protocol name to add (without colon suffix)
     */
    public void addWebProtocol(final String protocol) {
        final String prefix = protocol + ":";
        if (stream(webProtocols).get(stream -> stream.anyMatch(s -> s.equals(prefix)))) {
            logger.debug("Web protocols already contains: protocol={}", protocol);
            return;
        }

        assertFalse(protocolHelper.isValidFileProtocol("gcs://bucket/path"));

        // Add s3 protocol dynamically
        protocolHelper.addFileProtocol("s3");
        assertTrue(protocolHelper.isValidFileProtocol("s3://bucket/path"));
        assertFalse(protocolHelper.isValidFileProtocol("gcs://bucket/path"));

        // Add gcs protocol dynamically
        protocolHelper.addFileProtocol("gcs");

        }

        return false;
    }

    /**
     * Converts a crawling path to the appropriate protocol format.
     * Handles various path formats and adds proper protocol prefixes.
     *
     * @param path the original path to convert
     * @return the converted path with appropriate protocol prefix
     */
    protected String convertCrawlingPath(final String path) {

import jakarta.validation.Payload;

public class UriTypeTest extends UnitFessTestCase {

    // Test field with UriType annotation for WEB protocol
    @UriType(protocolType = ProtocolType.WEB)
    private String testFieldWeb;

    // Test field with UriType annotation for FILE protocol
    @UriType(protocolType = ProtocolType.FILE)
    private String testFieldFile;

    // Test field with custom message

        protocols = new String[] { "http:" };
        values = "https://www.foo.com/\nhttps://www.bar.com/";
        assertFalse(UriTypeValidator.check(protocols, values));

        protocols = new String[] { "http:" };
        values = "https://www.foo.com/\n \nhttps://www.bar.com/";
        assertFalse(UriTypeValidator.check(protocols, values));

        protocols = new String[] { "http:" };

import org.codelibs.fess.util.ComponentUtil;
import org.junit.jupiter.api.Test;
import org.junit.jupiter.api.TestInfo;

/**
 * Test class for AdminWizardAction.
 * Tests the convertCrawlingPath method for various protocol types.
 */
public class AdminWizardActionTest extends UnitFessTestCase {

    private TestableAdminWizardAction wizardAction;

    @Override
    protected void setUp(TestInfo testInfo) throws Exception {

        // javascript: protocol should be blocked
        assertFalse(result.contains("javascript:"));
    }

    @Test
    public void test_render_xss_dataProtocol() {
        String malicious = "[Click me](data:text/html,<script>alert('XSS')</script>)";
        String result = markdownRenderer.render(malicious);
        // data: protocol should be blocked

    <!-- Protocol types may only define constants in interfaces -->
    <suppress checks="InterfaceIsTypeCheck"
              files=".*[/\\]tooling-api[/\\]src[/\\]main[/\\]java[/\\]org[/\\]gradle[/\\]tooling[/\\]internal[/\\]protocol.+"/>
    <suppress checks="InterfaceIsTypeCheck"

        }
        // Block known dangerous protocols
        var dangerousProtocols = ['javascript:', 'data:', 'vbscript:', 'file:', 'about:', 'blob:'];
        for (var i = 0; i < dangerousProtocols.length; i++) {
            if (trimmedUrl.startsWith(dangerousProtocols[i])) {
                return '#';
            }
        }
        // Block URLs that look like protocol:// (unknown protocols)

import org.codelibs.fess.util.ComponentUtil;
import org.junit.jupiter.api.Test;
import org.junit.jupiter.api.TestInfo;

/**
 * Test class for GoAction.
 * Tests the isFileSystemPath method for various protocol types.
 */
public class GoActionTest extends UnitFessTestCase {

    private TestableGoAction goAction;

    @Override
    protected void setUp(TestInfo testInfo) throws Exception {
        super.setUp(testInfo);