@llm4ts/shell 0.17.0 → 0.18.0

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/java/com/demobank/legacy/web/TransferServlet.java

@@ -0,0 +1,223 @@
+package com.demobank.legacy.web;
+
+import java.io.IOException;
+import java.math.BigDecimal;
+import java.util.List;
+
+import javax.servlet.RequestDispatcher;
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServlet;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+import com.demobank.legacy.dto.BenfDTO;
+import com.demobank.legacy.dto.TrfDTO;
+import com.demobank.legacy.esb.EsbBenfListService;
+import com.demobank.legacy.esb.EsbException;
+import com.demobank.legacy.esb.EsbTrfExecService;
+import com.demobank.legacy.esb.EsbTrfValidateService;
+
+/**
+ * HERO 3 controller. Mapped on /transfer. Drives the 3-step wizard and
+ * keeps the in-flight TransferDraft in HttpSession ("trfDraft") -- the
+ * hardest conversion case in the fixture.
+ *
+ * GET  /transfer          -> start (or resume) at step 1; loads the
+ *                            beneficiary combo via ESB_BENF_LIST
+ * POST step=1             -> parse + validate entry, store draft in
+ *                            session, ESB_TRF_VAL, forward to step 2
+ * POST step=3             -> ESB_TRF_EXEC with the session draft, clear
+ *                            the draft, forward to confirmation
+ *
+ * (There is no POST step=2: the review page holds no fields, it re-posts
+ * only the confirmation. Numbering kept for the ops runbook.)
+ *
+ * ESB dependencies: ESB_BENF_LIST, ESB_TRF_VAL, ESB_TRF_EXEC.
+ */
+public class TransferServlet extends HttpServlet {
+
+    private static final long serialVersionUID = 1L;
+
+    private final EsbBenfListService benfListService = new EsbBenfListService();
+    private final EsbTrfValidateService validateService = new EsbTrfValidateService();
+    private final EsbTrfExecService execService = new EsbTrfExecService();
+
+    protected void doGet(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        // Entry point and "Back" target: always renders step 1, keeping any
+        // draft already in session so the fields come back pre-filled.
+        renderStep1(request, response, null);
+    }
+
+    protected void doPost(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+
+        String step = request.getParameter("step");
+        if ("1".equals(step)) {
+            handleStep1(request, response);
+        } else if ("3".equals(step)) {
+            handleStep3(request, response);
+        } else {
+            // Unknown step: restart the wizard (legacy catch-all).
+            response.sendRedirect("transfer");
+        }
+    }
+
+    /** Parse the entry form, ESB-validate, park the draft in session. */
+    private void handleStep1(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+
+        HttpSession session = request.getSession(true);
+        String custId = custId(session);
+
+        String benfId = trim(request.getParameter("benfId"));
+        String amtRaw = trim(request.getParameter("trfAmt"));
+
+        if (isEmpty(benfId) || isEmpty(amtRaw)) {
+            renderStep1(request, response, "Beneficiary and amount are required.");
+            return;
+        }
+
+        BigDecimal amt;
+        try {
+            // Server accepts the dot only; the client tolerates a comma and
+            // rewrites it -- known mismatch DB-3302, users with JS disabled
+            // hit this branch.
+            amt = new BigDecimal(amtRaw);
+        } catch (NumberFormatException e) {
+            renderStep1(request, response, "Amount format not valid (use 1234.56).");
+            return;
+        }
+        if (amt.compareTo(BigDecimal.ZERO) <= 0 || amt.scale() > 2) {
+            renderStep1(request, response, "Amount must be positive with max 2 decimals.");
+            return;
+        }
+
+        TransferDraft draft = new TransferDraft();
+        draft.setBenfId(benfId);
+        draft.setTrfAmt(amt);
+        draft.setTrfCcy("EUR"); // only EUR online, combo is decorative
+        draft.setTrfDesc(sanitizeDesc(request.getParameter("trfDesc")));
+        draft.setValDt(trim(request.getParameter("valDt")));
+
+        try {
+            BenfDTO benf = benfListService.getBeneficiary(custId, benfId);
+            if (benf == null) {
+                renderStep1(request, response, "Selected beneficiary no longer exists.");
+                return;
+            }
+            draft.setBenfNm(benf.getBenfNm());
+            draft.setBenfIban(benf.getBenfIban());
+
+            String rc = validateService.validate(custId, draft);
+            if (!"0000".equals(rc)) {
+                renderStep1(request, response, validationMessage(rc));
+                return;
+            }
+            // Real portal: VAL-TOKEN comes back inside ESB_TRF_VAL response;
+            // wrapper keeps it on the draft via this setter since rel. 2.5.
+            if (draft.getValToken() == null) {
+                draft.setValToken("VT-" + session.getId());
+            }
+        } catch (EsbException e) {
+            renderStep1(request, response,
+                    "Service temporarily unavailable, please retry (rc " + e.getEsbRc() + ").");
+            return;
+        }
+
+        // Park the draft for step 2/3. THE session attribute of this app.
+        session.setAttribute("trfDraft", draft);
+
+        request.setAttribute("draft", draft);
+        forward(request, response, "/transferStep2.jsp");
+    }
+
+    /** Execute against the host using the session draft, then clear it. */
+    private void handleStep3(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+
+        HttpSession session = request.getSession(true);
+        TransferDraft draft = (TransferDraft) session.getAttribute("trfDraft");
+        if (draft == null) {
+            // Session expired between review and confirm: restart.
+            response.sendRedirect("transfer");
+            return;
+        }
+
+        TrfDTO res;
+        try {
+            res = execService.execute(custId(session), draft);
+        } catch (EsbException e) {
+            res = new TrfDTO();
+            res.setStatus("KO");
+            res.setHostRc(e.getEsbRc());
+            res.setHostMsg("HOST UNREACHABLE - TRANSFER NOT EXECUTED");
+        }
+
+        // Draft must not survive execution (double-submit guard is host-side
+        // via VAL-TOKEN, but keep the session clean anyway).
+        session.removeAttribute("trfDraft");
+
+        request.setAttribute("trfRes", res);
+        forward(request, response, "/transferConfirm.jsp");
+    }
+
+    private void renderStep1(HttpServletRequest request, HttpServletResponse response,
+            String stepErr) throws ServletException, IOException {
+
+        HttpSession session = request.getSession(true);
+        try {
+            List combo = benfListService.listBeneficiaries(custId(session));
+            request.setAttribute("benfCombo", combo);
+        } catch (EsbException e) {
+            request.setAttribute("benfCombo", new java.util.ArrayList());
+        }
+        // Pre-fill from any draft still in session (Back from review).
+        TransferDraft draft = (TransferDraft) session.getAttribute("trfDraft");
+        if (draft != null) {
+            request.setAttribute("draft", draft);
+        }
+        if (stepErr != null) {
+            request.setAttribute("stepErr", stepErr);
+        }
+        forward(request, response, "/transferStep1.jsp");
+    }
+
+    /** Host charset is restrictive; strip what SEPA remittance rejects. */
+    private String sanitizeDesc(String desc) {
+        if (desc == null) return null;
+        String cleaned = desc.replaceAll("[^A-Za-z0-9 .,/()-]", " ").trim();
+        return cleaned.length() > 140 ? cleaned.substring(0, 140) : cleaned;
+    }
+
+    private String validationMessage(String rc) {
+        if ("0201".equals(rc)) return "Insufficient available balance.";
+        if ("0205".equals(rc)) return "Daily online transfer limit exceeded (EUR 5,000.00).";
+        if ("0207".equals(rc)) return "Transfer refused by compliance screening.";
+        return "Transfer refused by the bank host (code " + rc + ").";
+    }
+
+    private void forward(HttpServletRequest request, HttpServletResponse response,
+            String jsp) throws ServletException, IOException {
+        RequestDispatcher rd = request.getRequestDispatcher(jsp);
+        rd.forward(request, response);
+    }
+
+    private String custId(HttpSession session) {
+        String custId = (String) session.getAttribute("custId");
+        if (custId == null) {
+            custId = "CUST0042";
+            session.setAttribute("custId", custId);
+        }
+        return custId;
+    }
+
+    private String trim(String s) {
+        return s == null ? null : s.trim();
+    }
+
+    private boolean isEmpty(String s) {
+        return s == null || s.trim().length() == 0;
+    }
+}

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/WEB-INF/web.xml

@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="ISO-8859-1"?>
+<web-app xmlns="http://java.sun.com/xml/ns/javaee"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
+             http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
+         version="2.5">
+
+  <display-name>DemoBank Internet Banking Portal</display-name>
+
+  <context-param>
+    <param-name>demobank.esb.endpoint</param-name>
+    <param-value>http://esb-gw.internal.demobank.example:7801/esb/router</param-value>
+  </context-param>
+  <context-param>
+    <param-name>demobank.esb.timeoutMs</param-name>
+    <param-value>12000</param-value>
+  </context-param>
+
+  <servlet>
+    <servlet-name>AccountOverviewServlet</servlet-name>
+    <servlet-class>com.demobank.legacy.web.AccountOverviewServlet</servlet-class>
+  </servlet>
+  <servlet-mapping>
+    <servlet-name>AccountOverviewServlet</servlet-name>
+    <url-pattern>/accountOverview</url-pattern>
+  </servlet-mapping>
+
+  <servlet>
+    <servlet-name>BeneficiaryServlet</servlet-name>
+    <servlet-class>com.demobank.legacy.web.BeneficiaryServlet</servlet-class>
+  </servlet>
+  <servlet-mapping>
+    <servlet-name>BeneficiaryServlet</servlet-name>
+    <url-pattern>/beneficiary</url-pattern>
+  </servlet-mapping>
+
+  <servlet>
+    <servlet-name>TransferServlet</servlet-name>
+    <servlet-class>com.demobank.legacy.web.TransferServlet</servlet-class>
+  </servlet>
+  <servlet-mapping>
+    <servlet-name>TransferServlet</servlet-name>
+    <url-pattern>/transfer</url-pattern>
+  </servlet-mapping>
+
+  <session-config>
+    <session-timeout>10</session-timeout>
+  </session-config>
+
+  <welcome-file-list>
+    <welcome-file>login.jsp</welcome-file>
+  </welcome-file-list>
+
+  <error-page>
+    <error-code>500</error-code>
+    <location>/help.jsp</location>
+  </error-page>
+
+</web-app>

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/accountOverview.jsp

@@ -0,0 +1,65 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" %>
+<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
+<%@ taglib uri="http://java.sun.com/jsp/jstl/fmt" prefix="fmt" %>
+<%-- HERO 1: account overview. Server-rendered from AccountOverviewServlet
+     ("accts" request attribute, list of AcctOvwDTO) plus an AJAX refresh
+     that re-reads balances as JSON. --%>
+<jsp:include page="header.jsp" />
+
+<h1>Account Overview</h1>
+<p>Position as of <c:out value="${asOfTs}" /> &nbsp;
+  <input type="button" id="btnRefresh" class="btn" value="Refresh balances" />
+  <span id="refreshMsg"></span>
+</p>
+
+<table class="data" id="acctTable">
+  <tr>
+    <th>Account</th>
+    <th>Description</th>
+    <th>Ccy</th>
+    <th class="num">Current balance</th>
+    <th class="num">Available balance</th>
+  </tr>
+  <c:forEach var="a" items="${accts}" varStatus="st">
+    <tr class="${st.index % 2 == 1 ? 'odd' : ''}">
+      <td><c:out value="${a.acctNo}" /></td>
+      <td><c:out value="${a.acctDesc}" /></td>
+      <td><c:out value="${a.ccyCd}" /></td>
+      <td class="num curBal"><fmt:formatNumber value="${a.curBal}" minFractionDigits="2" maxFractionDigits="2" /></td>
+      <td class="num avlBal"><fmt:formatNumber value="${a.avlBal}" minFractionDigits="2" maxFractionDigits="2" /></td>
+    </tr>
+  </c:forEach>
+  <c:if test="${empty accts}">
+    <tr><td colspan="5">No accounts found for customer.</td></tr>
+  </c:if>
+</table>
+
+<script type="text/javascript">
+$(document).ready(function() {
+  $("#btnRefresh").click(function() {
+    $("#refreshMsg").text("Refreshing...");
+    $.ajax({
+      url: "accountOverview",
+      type: "GET",
+      data: { fmt: "json" },
+      dataType: "json",
+      cache: false,
+      success: function(data) {
+        // Row order from the ESB matches the rendered table (host keeps
+        // acct order stable per customer), so update positionally.
+        var rows = $("#acctTable tr").not(":first");
+        for (var i = 0; i < data.accts.length && i < rows.length; i++) {
+          $(rows[i]).find("td.curBal").text(data.accts[i].curBal);
+          $(rows[i]).find("td.avlBal").text(data.accts[i].avlBal);
+        }
+        $("#refreshMsg").text("Updated " + data.asOfTs).removeClass("msgErr").addClass("msgOk");
+      },
+      error: function() {
+        $("#refreshMsg").text("Refresh failed, please retry.").removeClass("msgOk").addClass("msgErr");
+      }
+    });
+  });
+});
+</script>
+
+<jsp:include page="footer.jsp" />

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/beneficiaryEdit.jsp

@@ -0,0 +1,70 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" %>
+<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
+<%-- HERO 2 (form): add/edit beneficiary. Client-side jQuery validation
+     (inline + validate.js) AND server-side validation in BeneficiaryServlet.
+     The two rule sets overlap but are NOT identical on purpose:
+       - client allows 70 chars for name, server allows 60 (DB-2988)
+       - client IBAN check is shape-only, server also checks country IT/DE/FR
+       - client tolerates decimal comma, server does not (DB-3302 pattern)
+     "benf" request attribute holds the BenfDTO being edited (may be new). --%>
+<jsp:include page="header.jsp" />
+
+<h1><c:choose><c:when test="${empty benf.benfId}">Add beneficiary</c:when><c:otherwise>Edit beneficiary</c:otherwise></c:choose></h1>
+
+<c:if test="${not empty srvErrs}">
+  <ul>
+    <c:forEach var="e" items="${srvErrs}">
+      <li class="msgErr"><c:out value="${e}" /></li>
+    </c:forEach>
+  </ul>
+</c:if>
+
+<form id="benfForm" class="legacy" method="post" action="beneficiary">
+  <input type="hidden" name="benfId" value="<c:out value='${benf.benfId}' />" />
+  <div class="row">
+    <label for="benfNm">Beneficiary name</label>
+    <input type="text" id="benfNm" name="benfNm" size="50" maxlength="70"
+           value="<c:out value='${benf.benfNm}' />" />
+  </div>
+  <div class="row">
+    <label for="benfIban">IBAN</label>
+    <input type="text" id="benfIban" name="benfIban" size="40"
+           value="<c:out value='${benf.benfIban}' />" />
+  </div>
+  <div class="row">
+    <label for="bankNm">Bank name</label>
+    <input type="text" id="bankNm" name="bankNm" size="40"
+           value="<c:out value='${benf.bankNm}' />" />
+  </div>
+  <div class="row">
+    <label for="ccyCd">Currency</label>
+    <select id="ccyCd" name="ccyCd">
+      <option value="EUR" <c:if test="${benf.ccyCd == 'EUR'}">selected="selected"</c:if>>EUR</option>
+      <option value="USD" <c:if test="${benf.ccyCd == 'USD'}">selected="selected"</c:if>>USD</option>
+      <option value="GBP" <c:if test="${benf.ccyCd == 'GBP'}">selected="selected"</c:if>>GBP</option>
+    </select>
+  </div>
+  <div class="row">
+    <input type="submit" class="btn" value="Save" />
+    <input type="button" class="btn btnGrey" value="Cancel"
+           onclick="window.location='beneficiary';" />
+  </div>
+</form>
+
+<script type="text/javascript">
+$(document).ready(function() {
+  $("#benfForm").submit(function() {
+    var ok = true;
+    // NB: client allows up to 70 chars, the host field is CHAR(60) --
+    // servlet rejects instead of truncating. Kept as-is since 2011, see DB-2988.
+    if (!dbRequired("#benfNm", "Beneficiary name is required")) ok = false;
+    else if (!dbMaxLen("#benfNm", 70)) ok = false;
+    if (!dbRequired("#benfIban", "IBAN is required")) ok = false;
+    else if (!dbIbanShape("#benfIban")) ok = false;
+    // bankNm optional on the client; server requires it for non-EUR.
+    return ok;
+  });
+});
+</script>
+
+<jsp:include page="footer.jsp" />

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/beneficiaryList.jsp

@@ -0,0 +1,43 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" %>
+<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
+<%-- HERO 2 (list): beneficiary management. Rendered by BeneficiaryServlet
+     with "benfList" (list of BenfDTO). Delete goes back through the same
+     servlet with action=delete. --%>
+<jsp:include page="header.jsp" />
+
+<h1>Beneficiaries</h1>
+
+<c:if test="${not empty flashMsg}">
+  <p class="msgOk"><c:out value="${flashMsg}" /></p>
+</c:if>
+
+<p><a class="btn" href="beneficiary?action=new">Add beneficiary</a></p>
+
+<table class="data">
+  <tr>
+    <th>Name</th>
+    <th>IBAN</th>
+    <th>Bank</th>
+    <th>Ccy</th>
+    <th>Actions</th>
+  </tr>
+  <c:forEach var="b" items="${benfList}" varStatus="st">
+    <tr class="${st.index % 2 == 1 ? 'odd' : ''}">
+      <td><c:out value="${b.benfNm}" /></td>
+      <td><c:out value="${b.benfIban}" /></td>
+      <td><c:out value="${b.bankNm}" /></td>
+      <td><c:out value="${b.ccyCd}" /></td>
+      <td>
+        <a href="beneficiary?action=edit&amp;benfId=${b.benfId}">Edit</a>
+        &nbsp;
+        <a href="beneficiary?action=delete&amp;benfId=${b.benfId}"
+           onclick="return confirm('Delete beneficiary ${b.benfNm}?');">Delete</a>
+      </td>
+    </tr>
+  </c:forEach>
+  <c:if test="${empty benfList}">
+    <tr><td colspan="5">No beneficiaries registered.</td></tr>
+  </c:if>
+</table>
+
+<jsp:include page="footer.jsp" />

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/css/bank.css

@@ -0,0 +1,132 @@
+/* DemoBank portal stylesheet. Grown organically since 2005 -- beware. */
+
+body {
+  margin: 0;
+  padding: 0;
+  font-family: Verdana, Arial, Helvetica, sans-serif;
+  font-size: 11px;
+  background-color: #eef2f5;
+  color: #222222;
+}
+
+#topbar {
+  background-color: #003b6f;
+  color: #ffffff;
+  padding: 8px 14px;
+}
+#topbar .logo {
+  font-size: 18px;
+  font-weight: bold;
+  letter-spacing: 1px;
+}
+#topbar .userbox {
+  float: right;
+  padding-top: 4px;
+}
+#topbar a {
+  color: #ffd24d;
+}
+
+#nav {
+  background-color: #0d5ca3;
+}
+#nav ul {
+  margin: 0;
+  padding: 0 10px;
+  list-style: none;
+}
+#nav li {
+  display: inline;
+}
+#nav a {
+  display: inline-block;
+  padding: 6px 12px;
+  color: #ffffff;
+  text-decoration: none;
+}
+#nav a:hover {
+  background-color: #1470c4;
+}
+
+#content {
+  padding: 16px;
+  min-height: 380px;
+}
+
+#footer {
+  border-top: 1px solid #b8c4ce;
+  padding: 8px 14px;
+  color: #667788;
+}
+#footer .small {
+  font-size: 9px;
+}
+
+h1 {
+  font-size: 16px;
+  color: #003b6f;
+}
+h2 {
+  font-size: 13px;
+  color: #0d5ca3;
+}
+
+table.data {
+  border-collapse: collapse;
+  width: 100%;
+  background-color: #ffffff;
+}
+table.data th {
+  background-color: #d7e3ee;
+  text-align: left;
+  padding: 4px 8px;
+  border: 1px solid #b8c4ce;
+}
+table.data td {
+  padding: 4px 8px;
+  border: 1px solid #d0d8e0;
+}
+table.data tr.odd {
+  background-color: #f4f8fb;
+}
+td.num,
+th.num {
+  text-align: right;
+}
+
+.btn {
+  background-color: #0d5ca3;
+  color: #ffffff;
+  border: 1px solid #003b6f;
+  padding: 3px 12px;
+  cursor: pointer;
+}
+.btnGrey {
+  background-color: #8899aa;
+  border-color: #667788;
+}
+
+.fldErr {
+  border: 1px solid #cc0000;
+  background-color: #fff2f2;
+}
+.errMsg {
+  color: #cc0000;
+  padding-left: 6px;
+}
+.msgOk {
+  color: #1a7a1a;
+  font-weight: bold;
+}
+.msgErr {
+  color: #cc0000;
+  font-weight: bold;
+}
+
+form.legacy label {
+  display: inline-block;
+  width: 160px;
+}
+form.legacy .row {
+  margin-bottom: 6px;
+}

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/dashboard.jsp

@@ -0,0 +1,28 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" %>
+<%@ page import="java.text.SimpleDateFormat" %>
+<%@ page import="java.util.Date" %>
+<%-- Landing page after login (filler). Scriptlet date banner is original
+     2006 code, do not convert to JSTL (breaks the branch kiosk build?). --%>
+<jsp:include page="header.jsp" />
+
+<%
+    SimpleDateFormat sdf = new SimpleDateFormat("EEEE dd MMMM yyyy");
+    String today = sdf.format(new Date());
+%>
+<h1>Welcome to DemoBank</h1>
+<p>Today is <%= today %>. Your last access was on your previous visit.</p>
+
+<h2>Quick links</h2>
+<ul>
+  <li><a href="accountOverview">Account overview</a></li>
+  <li><a href="transfer">Make a wire transfer</a></li>
+  <li><a href="beneficiary">Manage beneficiaries</a></li>
+</ul>
+
+<h2>Notices</h2>
+<p>
+  Scheduled maintenance every Sunday 02:00-05:00 CET. During this window
+  balances may be temporarily unavailable.
+</p>
+
+<jsp:include page="footer.jsp" />

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/footer.jsp

@@ -0,0 +1,8 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" %>
+</div><%-- /content --%>
+<div id="footer">
+  <p>DemoBank S.p.A. - Fictional demo institution. Internet Banking Portal v2.7</p>
+  <p class="small">For assistance call 800 000 000 (Mon-Fri 8:00-20:00). &copy; 2005-2013 DemoBank.</p>
+</div>
+</body>
+</html>

package/kits/j2ee-nextjs/fixtures/demo-bank/legacy-j2ee/src/main/webapp/header.jsp

@@ -0,0 +1,22 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" %>
+<%-- DemoBank shared header. Included from every page. Last touched 2013-05-17 (rmasi). --%>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
+<title>DemoBank Internet Banking</title>
+<link rel="stylesheet" type="text/css" href="css/bank.css" />
+<script type="text/javascript" src="js/jquery-1.12.4.min.js"></script>
+<script type="text/javascript" src="js/validate.js"></script>
+</head>
+<body>
+<div id="topbar">
+  <span class="logo">DemoBank</span>
+  <span class="userbox">
+    Welcome, <%= session.getAttribute("custNm") == null ? "MARIO BIANCHI" : session.getAttribute("custNm") %>
+    &nbsp;|&nbsp; <a href="login.jsp">Logout</a>
+  </span>
+</div>
+<jsp:include page="nav.jsp" />
+<div id="content">