}
                    return;
                }
                if (logger.isDebugEnabled()) {
                    logger.debug("Message is required but was empty");
                }
                writeJsonResponse(response, HttpServletResponse.SC_BAD_REQUEST, createErrorResponse("Message is required"));
                return;
            }

        assertFalse(protocolHelper.isValidFileProtocol("")); // empty
        assertFalse(protocolHelper.isValidFileProtocol("s4://bucket/path")); // similar but not s3
        assertFalse(protocolHelper.isValidFileProtocol("gcss://bucket/path")); // similar but not gcs
    }

    @Test
    public void test_all_file_protocols_together() {
        ComponentUtil.setFessConfig(new FessConfig.SimpleImpl() {

        // Text with comma gets quoted, but parse preserves quotes
        input = "with,comma";
        escaped = KuromojiCSVUtil.quoteEscape(input); // "with,comma"
        parsed = KuromojiCSVUtil.parse(escaped);
        assertEquals(1, parsed.length);
        assertEquals("\"" + input + "\"", parsed[0]); // Quotes are preserved

        // Text with quotes gets escaped quotes, but escaped quotes don't get unquoted

    @Test
    public void test_security_pathTraversalWithLogExtension() {
        // These patterns attempt to access files outside the log directory
        // but must end with .log to pass isLogFilename check

        String sanitized1 = AdminLogAction.sanitizeFilename("../../../var/log/auth.log");
        assertEquals("/var/log/auth.log", sanitized1);

There is some assistance in the IDE for this plus a lot of validation that is applied at build time and on CI, but it is useful to keep these constraints in mind as well.

See [Gradle runtimes](runtimes.md) for a list of these runtimes and more details.

### Build execution model

    private final String containingType;
    private final String propertyName;
    private final String methodName;
    private final String methodDescriptor;

    /**
     * Was upgradedMethods originally, but got renamed to upgradedAccessors and then to replacedAccessors
     * can be removed once base version will be the one that also uses 'replacedAccessors'.
     */

        assertEquals(17, JvmUtil.getJavaVersion());

        System.setProperty("java.version", "8.0.332");
        assertEquals(8, JvmUtil.getJavaVersion());

        // Edge case: version starts with 1 but not old format
        System.setProperty("java.version", "18.0.1");
        assertEquals(18, JvmUtil.getJavaVersion());

        // Test with extra parts
        System.setProperty("java.version", "11.0.16.1+1");

        final String originalPath = "/original/path";
        final String customPath = "/api/v1/search";
        mockRequest.setServletPath(originalPath);
        // Contains partial match but not the exact string "SAStruts.method"
        mockRequest.setQueryString("query=test&SAStruts=value&method=execute");
        webApiRequest = new WebApiRequest(mockRequest, customPath);

        // Execute the job - should handle empty field name gracefully
        try {
            String result = purgeDocJob.execute();
            // The job should handle the exception internally but since QueryBuilders.rangeQuery
            // throws immediately with empty field name, we need to catch it here
            fail("Expected an exception for empty field name");
        } catch (IllegalArgumentException e) {

        requestCounters.cleanUp();
        return (int) requestCounters.size();
    }

    /**
     * Clean up expired entries.
     * Note: Guava Cache handles expiration automatically, but this method
     * can be called to force immediate cleanup.
     */
    public void cleanup() {
        requestCounters.cleanUp();
        blockedIps.cleanUp();
        if (logger.isDebugEnabled()) {