Fix #354: Defend against POST invalid content type (#355)

runtime/src/main/java/io/quarkiverse/loggingmanager/LoggerHandler.java

@@ -11,24 +11,41 @@
 import io.vertx.core.http.HttpServerResponse;
 import io.vertx.ext.web.RoutingContext;
 
+/**
+ * Handler for logger-related HTTP endpoints.
+ * Supports GET requests to retrieve logger information and POST requests to update logger levels.
+ */
 public class LoggerHandler implements Handler<RoutingContext> {
     private static final String LOGGER_NAME_PARAM = "loggerName";
     private static final String LOGGER_LEVEL_PARAM = "loggerLevel";
 
+    /**
+     * Handles incoming HTTP requests by delegating to appropriate method handlers.
+     *
+     * @param routingContext The Vert.x routing context
+     */
     @Override
     public void handle(RoutingContext routingContext) {
         HttpServerRequest request = routingContext.request();
         HttpServerResponse response = routingContext.response();
-
         HttpMethod method = request.method();
 
         if (GET == method) {
             handleGet(request, response);
         } else if (POST == method) {
             handlePost(request, response);
+        } else {
+            response.setStatusCode(405).end(); // Method not allowed
         }
     }
 
+    /**
+     * Handles GET requests to retrieve logger information.
+     * Returns all loggers if no logger name is specified, or details for a specific logger.
+     *
+     * @param request The HTTP request
+     * @param response The HTTP response
+     */
     private void handleGet(HttpServerRequest request, HttpServerResponse response) {
         response.headers().add("Content-Type", "application/json");
 
@@ -40,17 +57,29 @@ private void handleGet(HttpServerRequest request, HttpServerResponse response) {
         }
     }
 
+    /**
+     * Handles POST requests to update logger levels.
+     * Updates the specified logger with the provided level or removes the level if none specified.
+     *
+     * @param request The HTTP request
+     * @param response The HTTP response
+     */
     private void handlePost(HttpServerRequest request, HttpServerResponse response) {
+        String contentType = request.getHeader("Content-Type");
+        if (!"application/x-www-form-urlencoded".equals(contentType)) {
+            response.setStatusCode(415).end();
+            return;
+        }
 
         String loggerName = request.getFormAttribute(LOGGER_NAME_PARAM);
         String loggerLevel = request.getFormAttribute(LOGGER_LEVEL_PARAM);
+
         if (loggerLevel == null || loggerLevel.isEmpty()) {
             LogController.updateLogLevel(loggerName, null);
         } else {
             LogController.updateLogLevel(loggerName, loggerLevel);
         }
 
         response.setStatusCode(201).end();
-
     }
 }