From af2a43f946a44bb8c08b59f62199d274f3f1f6a2 Mon Sep 17 00:00:00 2001
From: Vahid Hashemian <vahidhashemian@us.ibm.com>
Date: Tue, 29 Sep 2015 16:15:22 -0700
Subject: [PATCH] Add validation of external resources for CSAR archives

Add support for validation of external resources specified in
imports, interfaces, and artifacts sections of the main yaml
template in CSAR archives.

Change-Id: I7dc6875cb8117ca56066552ec7d23ce98621f31d
Partially-Implements: blueprint tosca-csar-translation
---
 toscaparser/prereq/csar.py                    |  94 ++++++++++++++++++
 .../tests/data/CSAR/csar_wordpress.zip        | Bin 5964 -> 5967 bytes
 .../csar_wordpress_invalid_import_path.zip    | Bin 0 -> 5971 bytes
 .../csar_wordpress_invalid_import_url.zip     | Bin 0 -> 6043 bytes
 .../csar_wordpress_invalid_script_path.zip    | Bin 0 -> 5969 bytes
 .../csar_wordpress_invalid_script_url.zip     | Bin 0 -> 6043 bytes
 ...r_wordpress_with_url_import_and_script.zip | Bin 0 -> 6046 bytes
 .../tosca_single_instance_wordpress.yaml      |  16 +--
 toscaparser/tests/test_prereq.py              |  50 ++++++++++
 toscaparser/utils/urlutils.py                 |  16 +++
 10 files changed, 168 insertions(+), 8 deletions(-)
 create mode 100644 toscaparser/tests/data/CSAR/csar_wordpress_invalid_import_path.zip
 create mode 100644 toscaparser/tests/data/CSAR/csar_wordpress_invalid_import_url.zip
 create mode 100644 toscaparser/tests/data/CSAR/csar_wordpress_invalid_script_path.zip
 create mode 100644 toscaparser/tests/data/CSAR/csar_wordpress_invalid_script_url.zip
 create mode 100644 toscaparser/tests/data/CSAR/csar_wordpress_with_url_import_and_script.zip

diff --git a/toscaparser/prereq/csar.py b/toscaparser/prereq/csar.py
index 6b01951..898931e 100644
--- a/toscaparser/prereq/csar.py
+++ b/toscaparser/prereq/csar.py
@@ -12,11 +12,14 @@
 
 import os.path
 import requests
+import six
 import tempfile
 import yaml
 import zipfile
 
+from toscaparser.common.exception import URLException
 from toscaparser.common.exception import ValidationError
+from toscaparser.imports import ImportsLoader
 from toscaparser.utils.gettextutils import _
 from toscaparser.utils.urlutils import UrlUtils
 
@@ -93,6 +96,10 @@ class CSAR(object):
                          '"%s" does not exist.') % self.csar_file)
             raise ValidationError(message=err_msg)
 
+        # validate that external references in the main template actually exist
+        # and are accessible
+        self._validate_external_references()
+
     def get_metadata(self):
         """Return the metadata dictionary."""
 
@@ -148,3 +155,90 @@ class CSAR(object):
         with zipfile.ZipFile(self.csar_file, "r") as zf:
             zf.extractall(folder)
         return folder
+
+    def _validate_external_references(self):
+        """Extracts files referenced in the main template
+
+        These references are currently supported:
+        * imports
+        * interface implementations
+        * artifacts
+        """
+        temp_dir = self.decompress()
+        main_tpl_file = self.get_main_template()
+        main_tpl = self.get_main_template_yaml()
+
+        if 'imports' in main_tpl:
+            ImportsLoader(main_tpl['imports'],
+                          os.path.join(temp_dir, main_tpl_file))
+
+        if 'topology_template' not in main_tpl:
+            return
+        topology_template = main_tpl['topology_template']
+
+        if 'node_templates' not in topology_template:
+            return
+        node_templates = topology_template['node_templates']
+
+        for node_template_key in node_templates:
+            node_template = node_templates[node_template_key]
+            if 'artifacts' in node_template:
+                artifacts = node_template['artifacts']
+                for artifact_key in artifacts:
+                    artifact = artifacts[artifact_key]
+                    if isinstance(artifact, six.string_types):
+                        self._validate_external_reference(temp_dir,
+                                                          main_tpl_file,
+                                                          artifact)
+                    elif isinstance(artifact, dict):
+                        if 'file' in artifact:
+                            self._validate_external_reference(temp_dir,
+                                                              main_tpl_file,
+                                                              artifact['file'])
+                    else:
+                        raise ValueError(_('Unexpected artifact definition '
+                                           'for %s.') % artifact_key)
+            if 'interfaces' in node_template:
+                interfaces = node_template['interfaces']
+                for interface_key in interfaces:
+                    interface = interfaces[interface_key]
+                    for opertation_key in interface:
+                        operation = interface[opertation_key]
+                        if isinstance(operation, six.string_types):
+                            self._validate_external_reference(temp_dir,
+                                                              main_tpl_file,
+                                                              operation,
+                                                              False)
+                        elif isinstance(operation, dict):
+                            if 'implementation' in operation:
+                                self._validate_external_reference(
+                                    temp_dir, main_tpl_file,
+                                    operation['implementation'])
+
+    def _validate_external_reference(self, base_dir, tpl_file, resource_file,
+                                     raise_exc=True):
+        """Verify that the external resource exists
+
+        If resource_file is a URL verify that the URL is valid.
+        If resource_file is a relative path verify that the path is valid
+        considering base_dir and tpl_file.
+        Note that in a CSAR resource_file cannot be an absolute path.
+        """
+        if UrlUtils.validate_url(resource_file):
+            msg = (_('The resource at %s cannot be accessed') % resource_file)
+            try:
+                if UrlUtils.url_accessible(resource_file):
+                    return
+                else:
+                    raise URLException(what=msg)
+            except Exception:
+                raise URLException(what=msg)
+
+        if os.path.isfile(os.path.join(base_dir,
+                                       os.path.dirname(tpl_file),
+                                       resource_file)):
+            return
+
+        if raise_exc:
+            raise ValueError(_('The resource %s does not exist.')
+                             % resource_file)
diff --git a/toscaparser/tests/data/CSAR/csar_wordpress.zip b/toscaparser/tests/data/CSAR/csar_wordpress.zip
index 7889df356cfcbd68816377fc383fd2be29a2161e..5df7b48333a2480cd6f686e339cb0656fd0d009a 100644
GIT binary patch
delta 1226
zcmZ9Mdo<g37{>F<Pu+g5xzbgHLpoZQkZ6l`M2$_B1;dO|+PbUh(F!F|w2Mm(-xk&B
zh)aYbXVkS+<8JGk)opTA+Mdp}L+7@3Hp|*>f9yTyeb4hg&)=Wt2g`?+;x;r4Aqb#q
z?*-%Nc^D2n3VL8;70R@_Z{oDN!Y6@RT`hoBGKFIiq}f4971G?`9Ca%U_JTMt3Y7)e
zdmMSU5ybbOJ<mZ<kkW#}e{;HvV&i1iIz#exvlUp3tEpS!P(|9yG*L`ULS0Q=HZ!z0
z3L|Xw9;`{-F8j4VD-z>WI+#P4p5HB7<%YB3^$V<PJc_6T97-S2+=P20%_g9*I*HL|
z@e%lPU!HPC$*8+HQ2*xk9yqPbY8~h(6L>_j$SI!eud(QRY=5sUJ6gT4s%1t)86JPi
z7*R97C&Hr*dQX;fe#G|3u4D@w1hsaj{DXdmQJz89<fw5wA$G<m!PT{6&ULrLov5c1
zESY%Gm1#<}yJdsBXe_CE-<dtAwmcl<E_tT2OZbfS1R8YVIAo3)ebZM-%^`;Ht`OHV
zoK1@wWT71{L$V;Z$_##%F=8Ca&cf?WQbT34-gkRw(JX6u|IotYQ)XeEI7=Eie$<BS
z*`LF7W>t-Ep3_pAU(&OZOJ_wTQOvgWrnd9F!<U=reb=KqW3XcZje-w_1zwK%FH7vR
zM@Q{tDONSQ=u{`=?S%M(d7fGh{{ptX>Y9pDs%1&J+2e{c52{NSDB>9Ug}QP^>A(@U
zQA+C(NmOOagkFwmR)kApqqvyQU&cSEFYmM>tFq=O2EX;YCQ0(o6q;NLyy(VhJzdXW
zf2x|gR5Y1rWG8GWTv^Mjl^0)qNYSpJO_PfS!~7>l@KN=D4By+4@-RE9Jed#EdtZ5I
zX@z%n=!%Z%kkHrmT#xG^`zfxo$Nt;?(l9UP7G=Wrk!p9+yli+zY$xmXisfrAzIYvP
zVb$vX%TF2?P!n$B8!B57*DFbNo#J#-?VRD+xK7V>QvQn(%aoJaj$18XF>}&W_ix+s
zFYBd;@2E3qi_qFRp8e{jCVFn^%_VvqqsH+0RN7+kwzcH$)Ec|<3)125wSt=dywqoE
z5U~t3&)-axb`_tnm>P+7xU(zRSn;dg_KTinZtjY**OMcBmf%M7L9TqWk&`{rK$_$~
zKYbrFHx}DCxi&iqy~f(U%5+(^N}!VN4|&Ad9(W{WmK@vQB}WSHc$XHL3o8@DtsBm_
zJDO-13+Uc7ue~n6Cvge4%954skhX&dxGRHS!;=DW?yR%~d8Xg~ikm{pP2eU~MA7KX
zg+m9Ad+m9C)#ux=!<z$P8smKvsdVbo-rfGXf@$V}Paglfmro=a7A8IX^lq|6h*`Dg
zUkKX+R#FFBT6kcihJOb&4g{&u-)T~Fi<%Sk--Aa!{}+8ybDn1To1~elZG?VP0zSId
zu%ZM&8jh?efWZGTuZ#H@R`9M!319|G0NEHV=sj=)^9ghUe1OG+9Sj2!DO3pL0V=S;
zP!E7`erR<BknuQh7RN-dzLioO3z7gsd@ytf@bG?ch9(MlYGQ#{Qv)R9D1b!R3-8l<
d>#+zdXakfH0?@~`!7YLwzz}K5t~w~i{0+^U4($K{

delta 1216
zcmV;x1V8)FF3c{lw*mvPv<b7i0s#S&ivkdn%L5e$nzRX4v9t-3`U)PCs}T;969grb
z#tjpbO9c20QHMN7_LUNCbprqZag$I5Jbx+F305i8308G@3jhHG=mP)%1n2_*0KJxN
zZ`v>r$KUfQ?gKCiQ&n}mnAC@Lnp8G6I#p9uMNVSCY7(cmQ^ux!_nqy;i6Kcrn#PM3
z+2{YA?|x@aaT$>yrc0JF#ds!z7b+xvnSwG~lBIb<gDpvuU=oZ6gP6)luv{6N_XPuh
zyDy8A5C#^1Ly%OUIFKxcbSs||;2Eej1xZp`ZjJ^6)Zs$ODJs9I6-GLM!9ekxCw#RH
z6h(JLQEkSuys!rVqP!@-0jO<Gr?{)=ii&d0i~e(wh8PfE!qxn{ge4a?o-!1BBEqC7
zK~TmC>&RY6!r}n`7F15*0VYFuJA~6AoWr9ri^Cv)!;AUBpc2bgZL!>;V{Naa(LuyS
zk&s9_s>BKm>liU@?<rninl&ewZ{lP0?y(eeT?!W(kT_)-kSO9srXVL$>Uuc`f^&6@
zmv3nAR7^Ey+r`)0I$-3&*P7$XHC?ue=`B}Lqti$!9>{o19Ytkj9c{iB(+DGdK#uNd
zc#-FS35$q!Gjd5O4+#2PFhNtgL(7^=HPuaE*=p=mK?O96bB>fvZF2<GMro@t7E2P*
zhVDXPFA)*fE1Fk9bzi{3<U*df5KkC_Op;_I*PcDkmTXlB>ZzbZ-Ou_W#3poK&z;;+
z^gFWg+2ldh74REY6zLE=r$TLY2l>|?T6Q0Q;ZM7YX@>(;OdE8nRJ0wU<jB-&M$WhB
zhUVHYW$A=9OW90{$=<YjKpLSp?_3+18`eg<SE>!M6`fr_sO81NR31%V2Th$g&3<5O
zRtf4ss*5S;A!_mA_NJR7=%L7->|zIAA;+Hfcxh3v&*SR=Viktq8SfE@CO!0B&K5m?
z<h6!TLsLECO~Uj$yib>Ya1X=Fdjt<fYxiBV;Nacb-!)v)QSMut4d1o{+J0oURwu6Q
zu>OmRyWf!B->5}1!~dZe&gDVHsI6TwjPYw1yW%OPwR%P)l9P}n%*WYWs^Pi~dHso*
ze8S=O7rK~?;p3&ZnH6bZCP|-iy|mMR%PCDumDBONGnmynTpkhz5z(3{8YxX5{5(Gk
z&Q3i8n}u7J6+d_5$3ZGAESfho=7M+zZjPUvkH$K`yihfi8YA=@6e6ht^2Vo6bDZvC
zGw$gj>b{zcaIk-3)o5&{-zrB$*?4f_!4?vqK*3&+lc1E+5dQ^GO9KQ70001!#tIUX
zH3=01b+ieSO$kW@b+ieS`U)Piw+TQ219h|sv-%2l0t0ol36uH?9<z}RpaBDQv<Z{?
z3Ldjk4+8=Ndv!dMSP?Lj*AO3*rx9QcQHMN7_LUNCbprqZag!7hN&_j>36o(GIsq7y
zoDxj|T9fJ$R|BRA0F%ZEACr9)9Fu<&Bm+na0F!769h1WoKmogx1Qb^R2a{YBVFB!u
zz7%5vzYGAA-wYj-!xKOOG?RiAR|9|z0F$5%ACr9)CX*@-4wEky3;`LFJQiaC@spqy
eTLM83lc5$ElXwpflV27XlRFm<20{=30000nHVf7O

diff --git a/toscaparser/tests/data/CSAR/csar_wordpress_invalid_import_path.zip b/toscaparser/tests/data/CSAR/csar_wordpress_invalid_import_path.zip
new file mode 100644
index 0000000000000000000000000000000000000000..d6442594363def4ad1dca76b884680e8c375fa15
GIT binary patch
literal 5971
zcmbVQc|4SB{~o)suTjTNwis)RtRtgg8vBwELxXX~I+KVTLlg;F>QJ3RLQzPT$U(@G
zEnCQ&T_~I=C+qJS&U<DCdG+ISKgJ((-PiZJulu_^CI}i@9uNq`2x84SdNMp!g+`Ma
z1PY`DftWx7ATt<L4+(?d{qdF-U=U4T5RDaao%d%3QPF;+0f9Ci9_9$IenpmwY3sS}
zi*Bkp{W8V(W6i_-knMsDbuLb61)~POOzX=xqQWFGmkQ2)xHdXJFzgp_^yqlT812!=
zwJM!euIKK7?uJDi`J{%6JMXDPqaO-ir;q8Zl+-J2FH<b|P<@Z%b|zeA{{pMr>#kV_
zMj?*)JIA>Op9m`x99<U<+c?hz#iU~yO|CSWi7fNG6HMQ{uT#X@>adG;%V!8EHSuz)
zPx9=SYkhYkAi!=w&IQr<&arM5jZwEbBmHe5K6JJul~&%XKRI2nl$#2Z6%I*`uZ?kf
zi$vv!^N#0nnp&h4cx&s~)IjuJP`3yVUUIxQrZjrLr<qOsiYT-lAO9#SrQogrZxE_u
z0sT2XX^O+7VJc1UNZG1R$-4x>EG@#Tz$T|`)+YuqL|Vy6iimlSdSa;C_|g~6nxlMq
z`QwN7ffW~)Vq2<*bA+DrFxoR+>EqS-D*h<JXGIck7Fzn<v`Ph)o$S{zbUYQVVeQ#`
zo^CO8ZEW&A$gba6W3tC9?)92#7()1fZ2zPo{#%L5>i~^UCQm#v&d@#yGFZtvGxbd@
z)xyl~#FdxdZK@8z{u2#byXe^SkulDzzDF*pT%zpx7yZ6a#BJ-mhbu;feEtw)n`OBA
zXSSp6y<OMBUytCEBwGtrEavs{y)q6zY_Q9CmhGLv7Jn(;D0=y?wokSEU%OWx4Nhk1
zpPqo`T$+kRXudCIciqp}#<MOILl^Dd<zRyjg1x?8aiFnH=sS2CqknBSUG3Spwh3TB
zCcuDz>CS7M-1zX%gB>uSg|Ybws5}ylN1a3AQ3@L_Oeq9gwR19Wbs-UG)5%02qgg5K
zL;$D(So^mFZQw#Y0Nj5eiLhIYjeG-Ts#fF(AG&08gIS`>!|$+cNn9w{v#BkbD=Q%m
zZ0Py4E8M<<VSR$ZHSl~L(-gm}g|(aj_x{qZUr_eH*=XCMn00IK`!(06UXYSnrG|Ue
z65KKFvBmKGVCo~jhhL=lhu#n$a1{{up-b@&%HZ;ax(o~|G2hM-vmCS47Z;sSGs;^S
zNC-8myz!Oq?U3>M+oL4Cl!7!V^kM<R)I+;qJTZ8TmnUvhtO`J=UBx0^d$@7s;Tb?E
ze&FgK*n)Dw%lDkOFB*q~1fV>yyQP7oIH*yLA`5I$69&<t>z~oD6aqi6(f1q)&FBUf
zsi*(v56MCmSXf-W>{9TDwIbN(N`_C74blZm+)<Ewbv80G*D*TUua5oA@SB6B0L{hQ
z-0tS3URf<E-6yf^GOV4@84Ka`%Y0DzJ2<LvBmN)-AMDy3@98<5SQTflRT=IABm~MF
zC8YKMj<uEflZ~rTHLlrq@tST^+(eg|b}rJdTVTZXfrCg@>SzbM;V<Pqg~8Ep-X&Mm
zI@v~~F0>7y!>no8M1~IBK8EaJomZC<KGUi=eAb@rrCqs?yY5PGm~qq>b`8Rm+6?af
z=?W0ZZp3pa8?dPh0`g%J3kamRMM1n5&Kc!^!+5%4(GD0-93JKAjCR;TSK?V^Za4PJ
zn;u?$iX5*$%*)Ks<e5BtH07_9%|5M~jm6?0J$w{(rzWIJ!pI{t8o4~9-XF=`!J(5<
zcWqzqg?07iU{@ob{RxVx%r{kP{UNXTWF>-=LzHdf(J;eTtPO9y1^!^62Pfq_hASVL
zWdL1p7`Ntg{CuAysA_IKC7U;=6wU<A5U5Vk7s=M~5ecB~)z`|b#F-poia%G_$3joj
zIi%YFmi?13Et!AAoEfhiMi{0u{_e{y8<iTF))zho!`!7BPRpsF%0fb=N*;fVk8*ET
zZ<tWNrl?jC^0@Z`m>Gigv^>)-UZ;^LB0X~X{7nT3w87Qi5VBHppb^n>!RkqlmZA3F
z51RfyBD#9cByz0jiQSB1UQti)M+vSpxSj;7dp=jkas5;Mfl)oTT$;iArbqc-2Flf*
zx>cP)FVS$CO(G^B`H=M0#205FA%k{;++)A=sq>m&pLALKT4cb#|F7pRC7~tw$Vqu?
z)AWuPX88I5T|t;7TF@hyr-O&!7gwcu9TFvmR%%C4Uyw-(yWe_{TQ%LbFsH<Vdw}C+
zZnx203;6tlL3nS?5yR777DWe~^F@?ACR=#F@p2kGOAFw&Sfrz^a`Sw0BF65fc!XSn
zD(h$?Zs>ccJOZjI8lBy5doTQ*`sYM^i)~u4Ly^|BSWX~K@T+(+@lZaCtm`x4>vJa%
zbK)zLR!T^pkSI*VUD?C9E7EFO&r@#9%loC{KJyhaRrk?(I7F4cG+2!;H1oPws-!H1
zjV_Aq<aau8ye!!6aTqLFBc)1E=PT#oRf6W352oyvWqF}OS>wW<UViDcnj$u>_J3Cj
z`R5d0IdvuUlGLKg)o}h$*A*sR)k&&3-{Z4{rz+PYZZ947I`L3=v?pZp)}mr{dC#25
zi{nDan%IP%E)!lIyz7=3);r&Pp{?wey?k*(zo+{;Y;xeK;q24y@=IOonX-_nR7;G2
zon`cD#fbf1EDFWJr=88>u4cT+>=(%8efgMXK??N+%rNM{?-WEWtnjkA{Ee;(YN>5H
zBe%Q7%_{rOALZ&{nDkd;q8JX&r@yD=zvZuPoqsm>sZ%Ad*t_Y=mkGbMV~(&4^g@KB
z9Y<?r^U}!tpxy@s1<SC95#W)C4EXfr^8Bd|mduKpXu`#k7f+=m1=jAJ)>OWoT~Z;Q
zhSe&Wb7YQGNOM$xBTgG&64$9o*_N0m|0zrxe;9#VZtm=h@y7p?X^D-|4>Ij$ecOt_
zMTTIFb}~o%`k{R{v-U1nq-O2G`kx%904{dG64()IBiUfF5S-g?dE4Bo)41_XheFGs
z8CyfWoRzc@q)|@VwEoQ@h{2l%87sIP{8S6vQrZ}4CT%1yi;y24Hk6ZYM;gnUO3T9y
z<P5@bsb_fbhf-6bH?krr+7-*ya$$fSaS`jvfAu0o3nW8d{Qux5E~?;!@l?RMG2sA-
zFwSTZlsC%R4XrG)@$DZU5xKxf8*|fBdb&vSpAfhv+4NB?KwXuJQeYC+-UQAyE@K1Q
zi2ixrlT8<=*hf{~J$_JHB$Z)MFBrR~$*2e8lcYx!$@TjNe$>cpQBOt&rr792G{Oi8
zS=US*ZN>zkS!c5kj6@CVG2P<26R$*AiR-wkyQKF3swPGCtGwz{iHd|d`4=hAzSTy)
z_hrqy;XJq6;=b1Yp{&7YskC6A`YTR=<7CB1wb-49_Nz3c%0+Z!N7z(nAP{6Ru!P9Y
zh!mu=m!}KH^}H|of1DG^N3upp)3z>oL!@!8bQ>~P+MpRh6(!9({VUHXUs4Uvuf5dy
zE`@|A=$xCu(W!=pW*Tr^ZF_?%eeLHGHrmAnC5jC2se=<4GVdmDjqcM?vnxe2y}&TR
z#hCaHlvIi(2P7Z7D8m5`AC6z4&Z&-s9o%BOI@nsWC=d>Dk=u?G($CpW0gZQ7AhuPI
za|#{-I3MiK7|$B$pG=7T(@z*Lr}Q`8699QDU{T!cf3fyvJkp8me6yun6%1vh4do%@
z+i$cXFa8i`6cwdeB(kWeLI6?|z#=ybDagH=B`F#K+zA%CMYV8FY*?&?T4a|+W9%_e
zldp4$Fv}u2*M)I=1-F}*hb`gv>GBW*k+LK8T}h1vO;VNu&iB2P?woC&Hq$BlP>&8|
zi*w*XI6{ZIuf=!;TwX4hEz)}Bk=T%&9amo*!pai4KFgvitQ{#9HpAdI#3X9Vq=i`C
z;us*De}DFEy9B`G;e^7Wf8qcihtXp*0K|4+iTx07uUa8vnwdg%c)}Owd5W_w9koK}
zuLnFQKu=_5B}HpH-ZxS+q}2>E;E`{A{aVdc>)AZQ^>zx6JE(^)n#NyuS+STthx1}C
zLtf5f<?$!WzAvTcu};0W;ygl6iT!;_IW~hap*_3E7yf%5oSK{Z8(7<yAo`Hwq_*>O
z+Wj<lhut3i;pvvn+|}8~lISfg-ar$h<v$U-aQ6WlxJGnfwd**ov0eP)cRmvY6}1oz
zsX9@<O5op+7s#WaLIUw4`HKa*%@+$>X0J`WA5Dgvcpwl5XcbBTrj~7UA^^I>Ku1n;
z`;<sdvT-{o`OLT*{3hq^(-}GEd|+0foYeqCV*kIR3M5r2CpB`yi(3%4&KJ9>yotYk
zjv>caqoZWJx2a~gs7QUnhB^LuFoMW+5(b0*?HVjCc8g(WG%gA>6d4++2iYB$q&;Q7
zMXpWmj=1DGdT-1r`z7)njDhfW>z?+8Pp&hiGSy`Gq%yfzWhfgZa^7srB;F+4y(&Y}
zp0Z0J-(h~o9Vk=l-qfLN8_4&l1E%`_s!xi7)I{tJ|Hta9vy$*hrF5_AQ+5mFyszwt
z`}68kmVNRaMA&v>{{K;*T%COsxAt$cJvP-R73AHNC%K2R9Fy~hvy=E!V(%>mI(i~+
PZs2zT_+-FA{O|t&l?c`g

literal 0
HcmV?d00001

diff --git a/toscaparser/tests/data/CSAR/csar_wordpress_invalid_import_url.zip b/toscaparser/tests/data/CSAR/csar_wordpress_invalid_import_url.zip
new file mode 100644
index 0000000000000000000000000000000000000000..c7a260f584159f562e88404fc1c0cc32bd8d8b0d
GIT binary patch
literal 6043
zcmbVQc|4SB{~kMI-<M=9TeeC`$dY9&V_%YWFviF_GaRDDR>u;9)FG9%Z1v(;vt-}b
zWGN|I6haXd@q32zo|!3m^&6l2@ys7{J=gcTulu_^MtWrAY#<Pb8bqHjuN|ItoJ^S%
z1PUYvfxsYMkcp<622@iT<Bu^nqXCh<3?j4WW2Uw6^``}qkiR1XfwnImrg~l@vUD|b
zmP>;dUFGse#LH4+O+)>leFv$UT^!SkrgTu?t@XIbP!Z&%BD*(HQ_G_hegX3G(^+rH
z<@1`3Kd(bL-v`|dy>@b50gd(bJW8e&0@<RBd0s1`QPEc^TlA*>KGU6t5OMAmddZf7
zMJj4OrudZ8EMt%Pj|Dp*R!&$sEd<46xKkTlZ#NNG=W+`+?tIlO>u#;eC^#sU#e1}a
zomufc8@FW7a9luu&8Vb{Ui+{^^CBFnXmws}btOJzu{@1j%4;Mk<6s3V2{JoeIw`&>
z#_<^xmM_dcUBGN?mR{toqG8o2t?`7kn}6(*!~M5Mr&5Qy7=*72s`X*wb0d?B?((t+
z!TML=AL0{dnT*<I(=|?3epf9YPB@r-Cb%K6!!d{cv5ux*dii9sfa#Fp%@Eh=Z=aMK
z<v9xqr;l*Z$gX^g?XI85=PO~Owgq2*$*%NSI5)v(Lj+?IQt{Qe?l>$b$**nvbQ(m-
z(zDB#Vl8Cz?fX|Cn-M3a_d{OTmQA@(J$@dEk@vco)pD1X0Ht}O#~xYd$sY&lY-FFG
zT@^|*GqE{)z51(F-4V^#(VCkV9fsafW4&63BonI+RhE3xdKsd3$FktThCwl>zqFy%
zIz;gUgS^{|fvE77Nlc<hPw{cHWsO3wtP>B~Y_k5&@y=q1zZ7o}z5cOxzKQGe;70D)
z`)sXqGiv#lW+U{JUzIT;xT$;Dw)kQwqTL4Ut>8hLEjMa-+I#uF(##>Xq82k0{+?Db
z0t^TS3<#LcS4n&O=AR2AU_diN)3a()P&fwW48y==wq2N9OtYH{aX>px#sL{DimKcM
zfZBk?{WH)uuCxb$yB8$1Qw>}%%M?C-$smsQ(13^E35jxS2#se)Z!}AG0+vSC^FIUO
zwl!2+GgOE`-)8VE7sAX^l9!dcV&DMG_KKB?HH=ohDb=s5HSG^k(eI=Xuclx(q+4tm
zr0_E7Nz{oa$^Id6!lMXYVIPWQ@1QIel$y)v*iqU$*+S-Tt+j*&XA}$yRz?#-3~J*(
zb3Pk4+<GRD*X!6NWg@-kfG{=SE=W%#2I=LA-VrO6mDVB;SU((DyjZwn4>7Dgu>c6g
z1sr{zA5i}ALOFY*;ApgT0L;UEuQZT|RWoRmrPEwf)|6JI7+KJ&<)g{8((;@P$r_|7
zRm^yOPo(&`W+=8*;@jmno28l`YN_TU+Qf>!u|`VYZ?+N_zkyU$X*l(T>WaNNFWJRA
ztZt?iUfJErgWB$l;`Gne7R>lF!Z_8WQqUyf23$chKJJ@K?B|xyLUqh9EGp4|NMBW>
zjpS3vgt%LaKV@Jkmcw>guSKbMU}pwQR31V726-nDnf3y8X;b}-x(BL;iZ4fZ4ky(#
zIa*&!Tj?E#hgy;`2#oXGIRzb}Use?5Ki?xeVQ0%wZBymrroM4G)G+cBqf+p!!UFo$
zxf&2&LEJu&T$g{{2;@T+dJstV2L&-+XeXFG8tI8}hub4P(HNMg6Wo3mU2%K0OM0!o
z?cvpbnyux{nrRB7QT%7OWG#Dv591-&lU!_af?-0UKGqi^4!R?<1Zos#PDQZZE}qNG
z8{r&r=HI%+cX_6>q}^Gv?W+j{79KAWF!gebA6?+t@n?~Qe-RuW*BPJCc4$VVKfS1X
zdVqYaf4ymdLe9?!S;F=uP<Wo_r0z`ObhAFJ!Bo~J<CJXD*@_cyXpLCrlS5&Lz2r06
z$bD~?y2P~0ICyx#r+xBYh@4MzzB}mpmpHPb*!V&FIddDHj-u<sU)R$ed88)dxuc%G
zI$!BrQ7F=#1phcNG2!&8Nz{_-z5sL5$HsMD`!$`2@3WHW`uZXk=D9|B9*zplU6P_#
z!t-aF(O2_xN1lS_ODE8;N`jhvD>*Vh+S)$&i@PK&ud;{omacpR68$WtHv7f^9lT05
z>s=hXkl_-dtBbd$-W|N9KaK&<EOjNlMG75lNIRY#799Ka6OD{W;HPUTsbN{2OWCX$
zU?uJ7d9tQCy|QVFJm@BGbzpwe!GZcpN=cb;@>}rSTO1NDbnKn>sfk5B6>o)K2C`e;
z82K>K09}+N<#8Jw2Y)&yqGer^Zh*j=C<&N%D{Fedl|9F$Vut@@`0L%hhn(i-e@6G6
zh%?j;R9#*y>8+YlEY43XM9(%~dsJsIV^$Bh6VG&ijX^&1C@u{vv@42c#BdHPD)a|D
zRj+b0xI|*iCS!A2f4(}}_9?rj^I#qG;oFYp7x<{h@5)(=aSTpj%%1VTW~N_9Exj<)
z89J~;Yr)Iicgmo6)Pz60&hS9U)4D|;_8~Uy>~fdkyk|%Mh>o90c%EY8TF8HQt|0Zp
zVaId5FcX{A=}|83@-xvD@+jt2txCbq*M_mL7i1rMI3SVty2kiY8JK<7DFTZ-`bctD
zVH8xU=QjeEFRJKzgEFV5&IFCo_$T+191{k2r359bNj9>PPCgaTNFW2*y_ROEm7mq>
zfy#GX$M&gi9*|A0YGLNkZ*Y3g!|hG4$o2Zm)rP|;%*xdf+OD<U^+T11%5IPNxNSu}
zTi=qP+PWZhEobve?u3_esl;~@dv?T@nZIRj<CI@$qTRh5F%3u=t%vveIjUY!&S?_+
zhbkW<U(i%l(4B<aiY$b4s~hSmKC=B(WUinb5I|X09doRuybe>!aSL%vHjIA;(e?uA
z(Ca*|)%vaF@z$4G-MMRhLrRv(6qK7$&GSm9(>8KnuDY`5`+J$prK83CEvl;<EbSNW
z1+SDpS+vvt(lx1uF?3mzSU@$pPcljed4MBWjia<P4<oav-x5?gT)zFMz-|Ad2C{{z
z6AI~#`6pxlqRGPN{T~rn2oNmcj;3&w9~`xl{rAAaH+`8~Pnq-qE;hj8-4$y)X}P;g
zqh0sP|E3nt4cj~WWxB^q7}{DTEyN6@+a<+}TRV?P>vXn>TR<cs`rQz7F+-?{n1Pgp
zp47yIuB2EW)KJP;ObVhSsS}P)JI{tWl9n93on3dj0$j8k=HILM0d}~Bt55&c3m+|z
zR8g4!!B1FF#u4c$gLVa@0f~@KZ~>S%%*hpgOkn%h`x6*yWooRip$;|u4S^ezjB{fF
z>T)E+0^_mvC-5V~N(P`E8Cho6?zlM1ICXqDFSDXlG)t%TVC<$cwT33A2&G=B<OnM8
zozlZ@#UyB8vX$z!cFo{~>?mUgtGB#r*>*WRlaUh|;M*)I@kfI<u>F6kf78fRQxGM&
zASL&oLp2FYQcsfqUTunag`zKrb6Wb|?Y7zXrn1fFTSd`m{bw{UlXlHyy->;n+wWxf
z3W(dI{?OUyfk2RDz~Up=BYcofUY;&Ugf9yIKlTalBMAejaqobXF4XXmSTFREm`;}-
zNu(J2+y%BN&csHx3ol3uU5bMr!}D)lj!x6nHBo}7tJvz)X{nSPvQjB4Dwm~#%pRV}
z5+8nldx}F<!KMNZeu4x;guq-p<+Vad0ZE51iZjuKPsDGK=GRAP9{$00&6=A@f<QR9
zMQA&GNWW)0892sC2G^cRJIi<kpncqb$9R@NA7+H>!+yhf`4v~#&jREvfJJn&|Hay$
z@$fsc`^gsTk<k?w)0L8*{`o}fvSW@gN0Jbm<xn;W$yI>V46q2zf)8@PW=V|J1I`2;
z#hOAmvwLW)nL@;XS$pg$L8H%0H#N;mB@rvrwlc1_!Y0fisT2izqY)C5tpkbeMIEB%
zyiTcJM^o&&=1f#8-?YL58L;+jdJbyigHbVF0b%P^5~XJvJZ`on<zQROuF}&*Y%S8s
z@vB4#g)UI}je`ZP!DsZ=e{c*C&c7dypAG>q!8pRu@ZZ?LyiiK_EC8_&SVF(V+pkv8
zm@aULDqHy4GFw@Wxx<;Ols5uOg4NDG%ub9}aY!{#&?Q$6(qWV8X=zbFocViM4{;}%
z%?&g}5l!Z=zAjrvna_Oj5miBc-m&S&>!@n6Wp~FHx3L}}`a)mykHuzDC-mi%q9A`2
zKuB3hS7}sG!GaH%v{jr+$hpbxPPpdY^K{Li9eDnd?xr`ta2r|78ULBsmAjb?G>w9z
z-v>^U8`{LLedRRLBO&D@!&fKbR}x&?@&b7jR2+=EC450avGaoBr%4Bg_p1qW2M+{d
z0)1Bt2Bx2%=1l+;H*f9=`m1S^kYxMMpoFvMUhq4df1dIPITr#m2l31YAmZkTJqY8n
zHSxqpNO<iB#2@FBy;R;2<mY*a5MP0UnDPFmqrIZS_X*qP_~$|mBGd^%1NygXFgM#P
zhTYLvh|qEf(C|IT-ne*26Zcz$+I-#>moP`~k2!I_MEHc;KzMs~Py53s)R|ZrFfAS*
zUncjf3~{4G$lGF9-2Ezp*PggbA$)=&-EPc@Q|tcJA#NK8pTPjU9r&;Mcy;hi#QyMq
zt$rv0KE9OhSAF7cfsl94uDHLiK5^M6e1a<jUKu>||Bw2F>TnR9T2)5;Gj`O+7v#N^
g$GeBP924@#{t|nCF;GzAc(Ve3E5KbG6Yksp0eTSvH2?qr

literal 0
HcmV?d00001

diff --git a/toscaparser/tests/data/CSAR/csar_wordpress_invalid_script_path.zip b/toscaparser/tests/data/CSAR/csar_wordpress_invalid_script_path.zip
new file mode 100644
index 0000000000000000000000000000000000000000..5e4f9e0a0d64eefd73777caf4e63be3e1ebb2ee2
GIT binary patch
literal 5969
zcmbVQc|4SB8y?2KuaWFzDaKlwL$(aVH1;(+4Mt-f*(oE(v1C`rsDq-cC5a@GW8b1I
z35iIw=p0K$_}<}sXJ#UwK7P+@{4v*a-Pd#7_jBK`F#=4*1p<NSK+L5odNFxQ;Nz4a
zP#6^m!~o(4nZmSmkT6I<aDat5JqY|F9BkRg&S-fym=Q!l^%e{QZ9crr5I!UFO!e=q
zJ`IL?D3^{%SLY_1MF%4L1ZZ2_T&`72>H9Nmtft0COQ0hv9L5u-7RDw6LsV4W6iid8
zlr$^#KXyNz1G*ah>(Td6Y|2@01+Xp-zCn}J-yoq=(^o5BG2WQNmVFa0y?>EergdPR
zmQIi@?aD74uWkt`Mmf1J9<g!#7@l+;LuVY@VJf`J>ltOzHQFMNvDIW18I&#HSLozs
zSDoeBFZ1MiYDkFPn2Z~u<GEAIJPNI9b4qG?F%36=KaWb*XC&*oKn*7ax-bTkmDZf(
z@)YS@D#rb$oZZCyT7|EMj!hFp=K*Dp(5ncioN0xr+@Wq3u~-qUzJRpicznfGe(rGR
zXN#y0X_<3u#_e<0bdJ`pY2JUHE>Nf*^=DY8OA+%eeHh}}{nvP5vmw<CoX4A$zmGSm
z@RZ+qb9f)U{NhS-Pvc~%;5{xndxqE-+-gf=#p!<EBmzuvHD660D>)Zs1-4K8k_T6_
z^6oxM{Ta7DJv$1r8*x>e9r8(OU004q2=N^nnKcMlzVFr=qW0eSmRG?ks$1du-wIF7
zEsN%vo7$a-t@~>8_%Q5cB5Xa>Y3MCoici~+Oy)!J+IxTNzQ7@}t;%nFGpytZh8Wqb
z!c{-8sCW(!B*e774#<>vQmJIVpmWEk;K+@3yMnt#z6C645ov~rtAF*rZ{}SZ{8s#G
zwouo4MyoVpE)H>gw3^j@KV2`^hF}tPqUV644JsVgda<6bqgU`N{X4X7!u)mU-8UM>
zfB_i*0|KTytERX4;hzU9U_f&tvlCjfNK}CHY3BfExlI@1E9rM~ApvO1$pj$7c}a~7
z0H_^U`?mva;zGOt+}$9NU0Mu{@@z2^5r(OZ;saiRM-JUj!O?qn_9k)^rl-&wc;6m~
zv9G7yn4xtKJKMrA$LnrxCBx6Tzh>Zov;8?64O?eM?dIIT?zX%jNy#-zxKDGGC)zW)
z8h$5|@~Hoj2l!xIs@Rx2znC92-Z#8}!(Yp7?3DszcA==nw5_g~$PCo5d~qxtXV{Rs
z#Pf8*Xyd60QLi(R$I0|!0>acmxuLz$0cam@?3P$_+>DmX!1^v_iDD7b9&Xfd<Rc&y
zFOd3t-=PHg_@DOmM`5v$5N9vUZe<`dMa!^Bo(cB(I1HjmJ@QevL6AP*M%Vi_u3(V9
zO7;57KO`!ZV9_aUhgKrT*Q;P38ff3gwM$j3aK=M&T5P1HFQPRy{yg@D_MD>yKR7g-
z)6=ZRr?3Y<sE1*dX71PeXfAa90*{vL6)Z)JA#b>xA7=d%xAiBi=wtR_%UWy@<h&MR
zydX3mj<J<~#KKXjoYHOkIYGNKWoE!sqYN21$p6|s-%<E+-qbTzg98tTDkBrSo@doJ
zyV(Akx7a&@inao?2v6{3A43i?FQ`fioq8fa>0r-NXZO(0Q~O(Fv{C%utZGqn(2v+r
z>v|ATLBcs`(8PQR1?pim69^>#oq_>ASXXC9EZW;0gK|WBV*{MMT~UrZ=t?-N63%UB
zRd>nj%!oW&>-db>C~e!QTgKDr=3Lfyyvnv!0U0Losa^-!@5x%EWusijBP53}l{NK%
z6Q^MZ@}F%O20bz}#B!(0=V31?bqC*Sv^vBcxj(wfHXbEfFo8dfKE_}~8-1bJS~0Jz
zdzGSL?eg%_!Hhs*@f@XZk6c3O4?{RbicC*f_t9}>O0kF=3EP%j<_cyB)z?Z*w9J0&
zbp97R&m+3iDi^h#D0!KbdDNy8&K62P5X18+T}rs724YLNwnCFTgiG?XdPbc&fah78
z5lxU6R*!u*8$^wTbOsk2cW^35zz{e^!{<872Bw!Te5ua$WJ;FjYa9`|!aPCwN2v`*
z4Ah~El_t}={%!oUpumAJ&WrS-B6uC0zTAC><x5?g66<aTV^Kp_a;*=xzCG?Fed7if
zL|ItB#b4O3E5R;W*dQwuN}Gm_NWARhF>j7JBJpl`s8+&hs&NQE*};4@C@xFZ%B19(
zfwW*-h_(RC0wv&8&oe?71<l3L^4T+_R{YMZ5`{20tNHXYP9NXLeCm?j>>V^Nt!&Ux
zz#P7y<C~AMJE~{xV_rq$3YApwn(a|u=1A4Q>k^#VzewGMf%L~Q{&hj5O&kfnxA;Cp
z-916u)QDODA9<8V1f^ZQG}_J#dn9I?lS%jP*7@=BTzKph&Y<q7z?5T{b;T;xxd#>)
zRsLL;kzA{S8z0yX>fJE8>t7GkP*#bQJ}g;k-w|kvS#DVZKV_(km}zNyS+4Nnp{eU{
zWpCdHMxU~m>FDoUT<WciF=M;ZuY-(q3L1pI(6SJ+EC&}4$JUNSW;oHpr`y%TomkbT
z(X3f4F@ML5J`vvMLifjC`!0A?fE!BMF|^@Vos~!X=YtO@E^zsP-CmCVNw@Iw@rl{u
zoGRJCPoZPC4?wasRau`OAAcD8vhF=!je~b>(Hc)d&?8CJbGO|-m~Z41AG;lESpa=i
z?DFBW{XE|N_t6#Si*ds2h%BS(x>KEDR<yqxHTEkd)jsNNe#@oq5Rx5|8WUKxn5Tj`
zP<FMi)D)^35yX<N8(VUsQCQJI5$WnBe<6owX5wp>yRq9u(sc8a?k|3o@$qSWws>EC
zHL%KXG6ZLq?&$EA1_|a|VP?!4qzC~I+?4JKixU8KTQ3<uF*r7-aW~YuYQgua*tO1J
z--$ai;`P6!)rrbFA4D0iGZJepp-TR9Ep7gx19IHV)gSE}@K2rnL2LA51P&4eE0l{F
z%0Ce0zg4q$!6LS5`5TYeP6Ax)fW^Nf)@G@}U?5nJ-Kw^kWxr8J*E6}ESEelOZ8DZp
zhL8>!DU-IY!w~(hc4<qv4E$sd+(OC-X)0wXdk7&rIcXpx)rT~aHIb5q>&xiJVDnCK
z1su-9CvMint-G9{*Efr`he7~5!Xn%%|J92aEl>*m1O5j;F%dZzw6`4Ag8>Ujgmy&<
zJNr7jdY}}AH^03%fsr<5CMR{Yk!C+3a8s5^aWX(%nSxwkBG%pnE;FiS0h)-B1#Z30
z&^gvArROF2HC2)Y`fUQq>&NMIU_25uh$@*8|FE}eH+xjGkYRWm&0jlUQR#&VCQdff
z{91($MSQR0Cv_Mub6iPNi29cD>^JQdoqR2*B*ht7<=f)*>7QgD;O{Os$Bp_km#4aZ
zTI=y#?;Ede_gkr{7;9X@^0VpHzit%0a>ITNOuV-UXY?$3u0IS2vKm-|Bxghn($&Y?
z4efr`AN4=ZiRhz4hDej%0a*j2QJGXPvP??98$l5-#r^IK*A!1?6W5tx$~$hAQMXW~
zmm(AM3=B-w;MyAY`j2%r?upxIR9D=Wr-jcQoGFlgK6`m;pC;6<2F36I%>Wl=;N`pD
zAet4Dbud(#jXq{F?HgrjV;t<@ceZPRt!Ie<;Sd(7?T8`$obBXL0j_d{rV4Ue&MO4#
zhxr-fSpnUXF`;|<3FDR4oZ~(LkhcUDS!Vx>wKwAtPh{uJmU<#*AT4De3wg6WqYbzN
z4ztHokefxkkb>eoKxzh9q-G%oxmUAfCL(~GV50sEjbX<`C!0g#2FyE>kBJyBeae7Y
zRLQt6zOk3{xO8FC0-j4<ju?wO^tx>zv!kL@(t_VL*GJ)sL-#vV&D!xcR2WN&BNxI+
zYho}V$tUE(>cc}->VJA=v}YBiv{j#HW{TUGXHpi@h!c(eNE<l8AY#j)j#&N9F+e!~
z{_NY91i;+k;*3T8!~vE>(_jh!#6Dn&{t$1kS|O9V8E~3hF`pN>s*5a~)X&pg47nGj
zb>e1WW}=2ut|8Qb>Ug+5m+X_)R;auB-35euHlE89G(?>U4%S|kucj$w4=tlDFD+4g
zb8FSVPHF+;GJHA33wKiV%SpxL0=o3RqAGv*@8xhxPReC^4gV;S8*F+SuJ@?+gRf3{
z6#wDvah-9X{{>TquaH<fI7vNtCVBB{J_~)5$k^JzFH}Z$X`jFH7$Ybs1;NDIiTp(Z
z@20#!9R*cJ5k8W>R-oQ`t*~uAA>jRJF5JQcf!IK6T2a8vvTaHPKnYXgj-Wr95lKmQ
zYzHNs7<Yr;;=Fw}BjtPtm=wq-H2{&&{qI6}`<zBf`15y&-%l62sk|k~_9=!GA4*Nm
zcyBY!Zc!2YgiUk&^PmHf>Lfr9`nPMaFyAePozXbR&>Tt7h&{;exI{;j_gkdel<bI0
zTBG;IoV;Hm-2n-Nw_EqLH+)i^$(3m!!6#mmdsT+KQ6lBd#7N{##NDehMD5AD6w)33
z+HnW+(z-Ww$lC_eJ(_@-{=e!IqaZdBd&B>+`cP&fKJhButNP^K0x9p99dUnNee!Fc
zbO%9}otXbW>XWLok1T7KN%q)MpLikfraaL-<kvANe_d80e{$@-#XwC%;LQpAE&`wQ
I*a-jq2ieWQH~;_u

literal 0
HcmV?d00001

diff --git a/toscaparser/tests/data/CSAR/csar_wordpress_invalid_script_url.zip b/toscaparser/tests/data/CSAR/csar_wordpress_invalid_script_url.zip
new file mode 100644
index 0000000000000000000000000000000000000000..b4133b6915cbaf164c2ae2f01dfa1944bc4ec236
GIT binary patch
literal 6043
zcmbVQc|6oxA09h{v5lp&gko%C?aHMrS%%5JHBq((BW5r|i56Q$ZuVTHi0P8yN(!Z-
z>|2&lN!gWz8*#I~zu~@jW+JcN@i{-g`D32*e4q22@A-a@1(Jag3Ic&xL7XIYqsS~(
zh6D5<P%tA11O^F%tPFJZO%33L(*#=^HW0&`5C*$;9(KEc)9fHR#t#f2(AvYt8j0&w
z;&}4Oe!BaNry8kOrZh9wIy}&{U4*69-St-Su(3aQbum6VTnclx`1t!P!!vz@fkEo(
zqr?$L_52#umsK7oZh|txFa9#2fsYHoDl-^{Ay%2MzO0neFK>UORQ&$gP44tR5HdSv
zIpyoRrdU`-xf8Dc%G+NkrV{GxF}n}tHW_j?+nd$mQlr)GMIo<H%jUPWO5P4ST;kmd
zL}BG7ejd$_&>iwGUd0CmIrhoBBO6~i*G{1^ny90&x!HuUsj@6a1zc}xwn#Z29VRyt
zo|;f|)wRRag(S&8TEt^%bF0`_TOU;o*MCUgD%OA2`R0i7aAr>nMDmijZaX32PIOvv
zhA@AKOXn>5b3*bsw?)JFE&X2}E$fuMN)*XG82UW8$u*C&(AWTZt86H3w{?$ZQkduH
z!j}Wp>VidgN96?Alx7!VTb~V*MDIgckAW|};n(^qc_-0tNs3?<R{qVhO4TJVHLzje
z*DQpVJ+>u)X+CUa<l|eAW3QXm#~xf<-HKW`Qf#Me??)5DT$y`akk*7np%3vWV_}H#
zQtr|5If*PAE5}2Z9)Cks$r-$hF<3d{-1C7o4p-kJpIou$(fu!mZ^Dr2_C>ds%t{1L
z!_85P2+hwBb+6Z5S0d|%2+2|}N>puT^zY(``))Tl67S{t5+Mm^6U<^3|7x445&GJ_
zbf^DguHlg}UDDa{DCB{+rCc66SlghhqF0$>yt<rF=n#Xt-=6GjY!m&)_6cKnWhz_a
z-l(<(U_dZnK)`eXT1IOx|2((=1KOBdAJSDYMH5_3xDZ?v*IbxZ!nT<U$w2E)CIgvG
zNoywoKn=jyu@Ptu7w!Y#ZUt%DtP6go#2q<s)-0ZVPnS>NKH0LkFg9#cTMTb*VjP<Z
z_Rp@!V^3IC$5=dq18TwJLLN5u^1^&O%DZ;C96OKFc5q?WtH}&(sn0qkExk;Sz}19$
zVZ35X5qHng|Kh*zVcO}ic*#BwVM#xxG~W;+ufMK)U%xVYdai`+h=ZY|_?U)S(QIF0
zm|11~SHX?}^VJS@ieA>|576kv0fecKcE?~b1Pl&~Ul;3!AiG@-FuvQe6tT$L9${X&
zZxRqn2-x~Nze72N^FQJ1kH+KSK`uVtTcv^II9;=9B@To60|sy%rrt@zN>R2Plp%H~
zjM&ZgKr{Q@4XF}UgYdX|*@biOR~{IAu4I{rYJe3l@I}LK)}mx&e#7W!Ki~g1%XueT
zVTLp5d|uY&xZKvXZX<6l8P1owlQv@65rVo3*YR|bW<nu~e%>q7{70to5>-5}?H=Jz
z!7u2tM~iCYAiN!9o<ev_)Z$tk=C9~A#f^1YX&0CVb_)-A<T&lF${OzEGTBwpQ*th*
z`BmzZ8drylS+i{e=x}=m$nJri>HAH4IA=7a#g4vE8a#ds^4PJ$&r5IVT)27k7cQ;P
zag9m*+apgv6a~ra5PpI4Q#Fte88|^8rSB9Z;P7rPPIwH~!yD~{!Qu%nSU0rOCc2W>
zYL0)yT0Ktb#rE#!zBsiEodFd>1$E;VZs|ZiyM~@nFSy4lU?6V6>%$kXe=TS5p~3sd
zs!94$S10yYx}J>}8lE2W9ZeVaAvPRIm?7py@E5Bz@bxf1ZLWGKBWYqgeWIyRB6Y8H
zqH(L~?a1QR(PhT|m8qI8CbhuK5=ZdTQ=UN1U3qw7xw7@EX(&ez3_@zmdYgu0ss~S`
zg}dy<NoO}O2IM?&zuJg96M0$q_roNc;<$VtR}E~PytJxi-a`~9F7M$ovvX<m3%~9!
z{5_wK^e;OFq~1E@&t`vWRp^LG-`|}NJ4p3PFgw+xzn%@h=9AOE(f>XzT_Ys)HT0d?
z00BHU-IY3mu^On-^RO_s$yauo^m8kg#??n%M_p5So^3`lEIlr1I2StjmAGpr%q#J!
z;S`;<pHbd)Azc&FlCDVwWiJ3#z4&EBz0K-P&%~D<pC3mz)qW2A>*MWHLglRYCw+(0
z6zi%z8$Dir<j{*|mrcc+Tc)GT9m=lAMO+s6{X^&<f+qYDZY8F};T`a{B?kpH#cvRW
zlbDI?(U~qMl{z(&r)BMVWzyAa;t6~O3NEA+`5}hB$eN?BzfKulwr|OUJNp!<%<S*>
z<|`=L`6;P5R?UF`Z#=OBS;OOV?Lh5h1P<Ei$&=FDZ`X1}GlHjBN-B0Rzoura>?CIw
z*dcs(yzEdEms5prkkVZ)^NE;fSAo=keiG@LtL;fqVLEeUOT?}EG;hQ9%eS2>BzFcz
zRC#146v_@rllFJyDYL%8=7l{kGEaZ=4g9p$)=@(=Yp~JxPZOg>Ws@f=h?a&(fyJ!H
z5KAw0o<m6&b^Y4YPjPzpFHAQ-j@NX-l?3O!<8}xw)pUe?uIlKhNLx9eBO)<A=QII1
z76Y-k&n34X)HV3LrEVEkMHiQryf_^y*pIPesgHrFi7cR*m3gdLV{YnRmSO=_R2&n&
zfP4Adjr2*;9eRfLRrt!>F)^bfZI@z+`6mlrys8=s5P|0~U#f3!XTrkO-XEH}GLi81
zIJPctS<z~0>R$N#h^x@}s<hm>9=CfPiqj~+IYp5vlWRh63-5NEO^w!zAUw+E3>3=;
zEet=?8q8Q=DE&R7QY@wFgl$SxaPP&o&NeelN`<$rnfbenDxW_kTa>X%83mCese3sF
z7QdnV19u9kS(fqGE}!i=AM%D6@ce_(4P*;F!)lXjplF6g2-+uDjZNyUdR{=g22|_A
zO2zYe_es&rSyJ!^(OrLA4_Ojo1Lj4iT&ul@xF8`I-Y5~vE7Cc8F+|pp_mr$n&bR*@
zaBKfqfox&z=8y3u{FAYNP-OiWftL!w9_?z4_76n+uV?=)uqZ`e&gxU{!vGgYU<hxD
zwU)HJz2SJzt@6LM-AnVv=1#@dek({ry}TXF4BjXYv#f8HgBv$D$k-v|5r<n5wlH&3
zE0~#rEK*@`&_o{AZfdSz2~$8A%Ns}HvyMUua#?9HYuR<ZDj@5%WV>7;2CyR!^7-^%
zy(rNFN!6e5Kln+CE4pH^ig-^j9*_v*hTiSs>*D5#R@uGw>+K0_in6vmtgmNk{SyLL
zr&`{L1*ogh(F#n#+Md7#=8qsiInq1BZ`5>VoNHM1RenzS18Jghy-4iJ0akqjK`CbB
z1NmP6;161Vv}&fB2B)EPE;bs3CgxtTbViK`>*gNM+c^|Hs1Huzy`G>Px)j%WS#Lo<
zM^{6d?xcd+pL?DpPAfc2yEj)8_12%WDBf*)xz%f>{r#f`zlHMRzGq+Y!rVqrhMq}W
zzkO_(fpP+p*Qhgm{ADl@WGOI2sn&=Rq#F+Fj`0ZaNB@s?qWDPG%+#{2OTom{ya3i_
zS^zU{LDEIT_&=S54htq%Lr=b@zw2HST8JiHI~S8>Vq&F*(9=F<TxF<ze-BE#w75)(
z1u?#Nj41Q!W6H3Aj)r478vGCgMo55#c9vC2qz0w#JtM=-7CD%(L{EAaWw7@<+tnJZ
zq>2OKkO#HxC?Wlv?G(`jH$`%J20x+b6NLBk{u$%h19g}MxeogY<B`hG^B)4p+W~`S
zXa9?}J>yYUWb>U3d!c9|12a*8k8a%2Cj10Bo@hE+v+T*Gqq_i*8UqHkStvnn*DT2~
zNMKKJFwJX3@_2{G+Gs>|*)+!P7q|F2on&D9K;C0^^q8XOwTMAmL?%-avM)+@sJ<(?
zvA9XvR@f~Qr+oc*%O@+HNAK&=!H_s7DAHMXp!>>ITu{Vfh3tca&wY{_QuE^KOD}M8
zM6FJ7sEKJuNrX?b1P*}39l!^Xi{Cj02<P9Az=ll#bTF<ic=S&!V178WHxWQ=2ZqEC
z@wTg#>D3l+m<}{@eg;~aXX||M0`qS{_d|6L{gIm-qwSn&reVT(AjBA|@S?6x!{gw+
z8Kg&g8q^Ea!xY1CT5nOQl$peHrhui0l&>;cxaj{FHskI3Iwj60?6Ab&hgD*UtcmS;
z5Bw3o7a{2R=;zq9{X@lXa~o;9-DljvkTK|a=LXg@o4xDh8;&GjG06sos|Qby#m;8r
zK-j9q`<A<YWi)q8nExhdfuy4sWuTl+v{w>BYw`kl6jTyQex<&kU|PSR*wE>a@qW}{
zuH%6~+@NLMP@wzS&~E~u<bHEg&>wZ1)Fc}>f>QUMTfwh$-q__)bG{4o9JD<jfJp8m
zwjjK*<D(`#{~hA@eacoUuM4uVAEL(BV4`Kbz3ynMs3>*9nmPV?u!5*{@?Zn~TQ%6)
zY!$=iXuLFNc~oeW8f0r+ilb@kEoyDPZi-8tqqoPLwqBy1Aq5C;tLkZc_|!VnDg$Px
z;8Tvt?J7fCC{gpa+Z1=Z%22eYtx~9G(B#;RIc;j)o;tK;1N9sb;CA4@>QmIA6cO9Q
z|FQbvRQQymbi3-)Rtwa;Uu=r|^Xk(c`_wadLMX~mnEyZOQ>!CDvuky@D08f<PdSjc
hQl8=-+T)m-f7}nTw-*BwGnqFZ@HY#*#dDLt{RgMk0GR*)

literal 0
HcmV?d00001

diff --git a/toscaparser/tests/data/CSAR/csar_wordpress_with_url_import_and_script.zip b/toscaparser/tests/data/CSAR/csar_wordpress_with_url_import_and_script.zip
new file mode 100644
index 0000000000000000000000000000000000000000..5dedfcdf246422cf40b8effbea42d09279da8ff5
GIT binary patch
literal 6046
zcmbVQc|26>A0E3Iy9gy~Wyu;{O|p#LF!rUfWNVBOgBgUhAeALFQrA`~3aKk(NeS7v
zEQv_gC>4rGw%-}<y)zTJ`i;+focUv(^L(H8dB4jsF`%L40)aq`AeI~@-S9L88Wm~~
z=p-!&1Of4b%(P)z2yGeP0AEWBFo>onn8vD&gUQM-fC)rJ`<?~_TD^Fh8+i4~F_(R`
zo_ZDJrkK+!QFJrbJj@@_wu_<0)%jN5h&~RovT!*vY%k_i-qHT3k?Fo6|3D?B(TsPr
zO82T2URI!w-2kPAo&Vz#6d&h@m8a1O)mx#Dd0D<!tE8<|F0a4x27B^dJqf-U7OC3K
zNd`s%c0$S_&VdJl`$HVjGY60^6TvaJJs3?cG?)o3@VbYXHod8l^RQKC6MiL~!7ty)
z&7u5(i%;rB_vOGqyFMvbgNAO$nn@H!8EGRvJ3|PaEKZ}9_UcW%y{lv!6(%!WCXrAb
z<J^vL$`R!r&E+t)xRvLvriHAM(RxhXA~<l$@y0v(k(*u3tfCi$VQs#I?8v0NRDSMY
zr;ZuaXF|d_yGi}{Ev-LFm(+{9<9B7MhCDyn=$ys!KwsP7R`GC>ka?H#l~A|QA753f
zlz4I<j_%tImYewz+fq4{Bk+ie(H?T4hx_n1(d>Ai#l5~}p(XRC6$(ySiT?G2htl*8
zTVtF3=;lI~-+g!kvg>s@{GrP$u69{5%s_C5WbX&K?`*MaZQ$WgCJ#I_Y-k?@>n~>7
zjL(XsS(w>rUU)i>tk|dhHd=c*$g%4^W1LrAmsG-&-KCGd>hy#fBwOd+Su`r(36L>H
zF6b$LW>s>3-5C{LJM5dV_eFt%#kAH#uZ#nC>g_V}v%E7{38x4~(F<Q%KUMR7d$pK7
z@F7#@$QUf=)Odt}%9|oKG#_It*NQ+4U9@|r0}>UiU3;l)M?<T?JoqC<Cu;IGG=Egh
z1TY{3Fd$$$zr(t#H-BH)00UYWn`^?P5h!1$V@|$Kva2pkDgbZfLL$(blZik^lVWOD
z0HAtc@vR41#g*{{a5sZQG{GR1a_r%Qr;IK$?e6sSKOk8g7YfEUwnlSi#>au-*uOf%
z?aLTe#u(5i{c0fNyl4w+DgJGIC7nB+?9U+8Y@L`is&D!?*QK2h6I-Iz^QsPU$GFE9
z={-D6{Ri&A<D`Jl%c6Z~eo-H~B=6u1P8`g&Z$O?YIa9>)ovn_j@EFu6ccw2s)TsRO
zH=g!E<CS(Ll3wr6s!-^~41}qLa>ZaVz8Ehoeod@&J|?RoVEuGtNn#O?y`FLTfeAn;
zUf}5O_zC5N7w(uh4u!|d1Uh+oY?cNR;$TKqa?ILuD%vvYbiETg<pSVzqz-mCG~*Sx
zQ2F-T>w60nw8P@+B!8UlUoO=CT+Z+*qFy}j$F@kB8#PD?iAxxDwdV)FGn{d-<fjQr
z-sWyz;+5Hw^h(!*O@iemY{EkD_BkGybPAp-+=w?=*2iOciu=eEUZjHKwN)wpgv?nO
zQ=|YiUC+Z-;u$Mvfnr><?Oc>bW87G$nc97X|117sbh?93McPOQ8+_-Ju7cCiP2GuQ
z)y}r((`H%+QDN3JtU`l3k`E%fSf-W51Z`f(4IQ;-eQNi_$6aIbbeM7ESGL0;<IoBG
zn<Hf)l7hs2h&0b1uLbg9Bnt>6_mhIYUU(NL2RsIg_CPscuy|i5tP9Fv16_%GmCmzn
zud1(kdUYJ)s_maMPhm45upm0H4nm))*xTt#xfF%ZiHP~w9*@}NfzGh&n{0s^4OQ9q
z_;H4obxSUMpPZgjE<B!4e}pg{9#;w3gZNths6tjD7u#?#Pck6S33ZuYOgCP?1#w3k
zmD+p{Tz;2rx)Ja8>1MmT@YIS;H+N1#%f9AIiIqur9gB5*9QR+qxs>tT+}+L1@Ercu
zNGBdVF7DaPoZwL2(9_T~bR^%eK&$@H{WdxCb{yumVZy`gV#TYdxrftp+SQ6SReKb+
zuarFWufw?@QWP488t3P0i=&KX<W*rJ`-daupk?FnoC|FiIpq_NSY~NRD@DBH{Ubl+
z4R>Dl&RVLxZ0s|tZbUWu;PH9FM}Mihp@qkW^78If*NSeiNL|5xZNHO_41w*u$JY?x
z)X++^PwV<Xe^N4EaQLvqla$JOu9kshg~kpo=TJ?w33ymw`rS6H;p_+t6gCe}95fZv
zp$mxNea#SQ&4X=Xvii6P4LWfo(pED31j~`55U^CEg|xIq6L0ple)WB*8~Kg81#^-Q
zb|@v!KkIt>ybhh|7bSYJ@lRgFeB_~27~Chs0y@X_DB)W{c<Dh$Q5(lw%Ga-3TMF;j
z>D5w|_)OjWtV?5>;MJCAR@0Knx3iF5A=MmwEifZ45808fuhiDVSrb&TU$r&W<>QFq
z*b?KHZ0NUY2hYKhdtni$f}GJ7T$hn_Ws)WAjW*Ll)XY~~6yYMrBl)yN38%kYbqf$;
zR{bdXA&GN2Y>)221EcD_EC;;*{D$c`)IYG|!`*d>A+uQKO;&rw>5Bv}W-~l4ts3k4
zmj<B+Q5Bc&WM(((+Bbi|`xGzUYeeMJr9#bdmM^=f{1+C|S)`<!^9TE>UaH>0mJJNH
zzH?)<EX@s7F==*ic=q}d=O?NxWC@dC0QGfOzq3sjHSp?c%|hFqAt7Hx8QYGro#j!Q
zR++l=xDDT7FREGhes2IX@2>d^9NYPyUuf@4&57-<n5tnr$S<O+%Trv^8qDz2IL`p5
zT(ax#?1?LH9ndHLYMhtrJab3#beHD6cG)RQpIPJZ6IpOW?1|iVzr;w5bH1gm^rf+W
zpi?-fi7)V_2wQ%^iry$kvsb90>xIHIiUplLdt_}B;%}cZ8obkGI?Ar}XNy(k*Cx*M
zQ^TJWp(<eJBq=*4<VyFfpo2fAPwvP0F?fD?`ARudH7Z8@S$3gH679B$<d=`%^F!X^
zC$V2j5=-aAo{mpEE}~x^D&gs~?Ng~O<(KdM9!BGktT7akSxwVUC@?$sRhE>vi7EH*
z8n^n75l9&3E;x+0@83!L7k$>R5je>ZtWnP9D4ahEw^jf)!6Nm2=_}9J4FN88z~bK!
zYc+3qc*x-0HY)+<RxgbknmS}#2FzIN>!hs2jbs|6#7*m(_Q~is)k|3EN$DB3=vj&z
zBh18&q$Lfchlb!%;%x|HX;X1&J$)(taD18#m+!u`r0CTIyVe*G^;)!CdLjt0BQ9cz
z`bRHPv_M|P`Thq#QDIqU3|1EJ2EhXoVO&r`PTo!~Zm9i2tH0iwzzC$dsiBqz!u&S`
zu1Yk`js>VIQc(&_!rGd^_l-+gfsUkinp?LqXq;_Cq5EEXNugMVe%-FvWfev(ZJxdK
z28B|+xRdV>-)&J&M4U`Qs-JJr4vEi<GId10<A-G)&Dt>>Iiv--#+gEp4_S=sxTx_%
zD;)+EqdG3F_}A{T_$lefN%^zY5pQrTxtCq0mRj7G+xkoEeSVbW^;Leu^Rw%g4Ofb!
z+_7JxAr(R59(9C`zdQ*9Sp+NrvOOXN>EeZT#i0FgsQ=g}l8+>f5T>o2(r|?FeeqVr
zeR2I}1FA@I?vKa0MtBmcxQ@T3e&|{d@&J`{^>lO^9By`4PeaXKzd}dt(Qc$#QC_he
zgWmX_u?&gs57$Pvt3&NdP>{zMh@J?9cSmu#NMc~(o*)T!aQF~mkvgX`LVM3owyV)z
zP80^hAue*;kwW@C+sUGQU1W(Jn#?g-&p^D7$L|==8fe8#h^^Rf7%!*f47Vmg-U?V0
zC;MNltr?HBBO9M=@fWgi330fz%;@?P4d?dV#}P?IX_noYR8(gHQe(g(Hw!7qt(qkv
z+5k8c%ye_ma1M{KSPN)Gr$s~TL1B|`Q&+St3#HIAqxQ0HSI-Su>fNNvHRy|w9Ioq3
zXvk|6v*dTV=_Q|XwE3f%dTD<h>LhEN1DAm#Z17c7j91{fg(s4Qs?R;I)F)=e)fJs(
zVUAdtWL6YZix3H$VDKM=2-`wb4HkZK3=q!0pY7`o0WickJK<5kv4Qu(=shw3#5Q1w
z{1R`gS|MVZA))GA;d9emMOl`Ps%Pmh1wIOaY2M9Dh*opFX#|DSss!tENx!JAg`!pS
zrw!1_NnGxrF1l!%0F4E?BKjPTp!*EDIrsLDK3Kp#6`%HSetj*@Gt^MzyW#%W4957j
ztU{dLpSgO}+o)&3YPb;LJM6k@E{|yWXi|sVvae&^ZZmbh>|ws*Eht(~6Qde17CV!g
z&I+y)?px|SL~CqEn49M@F`%LrpdnQ!%C{1{tMUSQ6jTsGyd{4}LAUmfV%@Mq#QW8d
zxrPS<v4fUiA;18%ZsY_&i6iHRpuZY8$w@Y>2PGdrH-lf}ynfIl=ll>DJ1ECK0FgLK
zY(jYb&__;q?kB{bN0rS~UK3>fNJNegrK4oLwE=0fs7QUnsyY6?FoMW+atDL{?HVjC
zHj80nG)@Y%95OUg53)Hf$<dVk7P&UxH^e2+(OY9q*)NelAqfa?v+ikY_~bfMD#OA=
z!Y7r<ttvy=D3S9<Ziu^8Wk}jnb}8gfP-WhTIb~|ynmUwi1Nk#JfENV+s83Rd)I@9z
z|JUlDC&MR|(ygjb*)5RsZr>31_tmE?`{YkJ&Pq~-#QgtJpIn{o6sJ~`jr5E)^+^SJ
iGv!I{p)AMb{NsO#y|ozV=!v|y0e>^V-4%A?xBmgh00>zC

literal 0
HcmV?d00001

diff --git a/toscaparser/tests/data/CSAR/tosca_single_instance_wordpress/Definitions/tosca_single_instance_wordpress.yaml b/toscaparser/tests/data/CSAR/tosca_single_instance_wordpress/Definitions/tosca_single_instance_wordpress.yaml
index fcf0196..1dd195a 100644
--- a/toscaparser/tests/data/CSAR/tosca_single_instance_wordpress/Definitions/tosca_single_instance_wordpress.yaml
+++ b/toscaparser/tests/data/CSAR/tosca_single_instance_wordpress/Definitions/tosca_single_instance_wordpress.yaml
@@ -37,9 +37,9 @@ topology_template:
         - database_endpoint: mysql_database
       interfaces:
         Standard:
-           create: Scripts/WordPress/install.sh
+           create: ../Scripts/WordPress/install.sh
            configure:
-             implementation: Scripts/WordPress/configure.sh
+             implementation: ../Scripts/WordPress/configure.sh
              inputs:
                wp_db_name: { get_property: [ mysql_database, name ] }
                wp_db_user: { get_property: [ mysql_database, user ] }
@@ -56,7 +56,7 @@ topology_template:
       interfaces:
         Standard:
            configure:
-              implementation: Scripts/MYSQLDatabase/configure.sh
+              implementation: ../Scripts/MYSQLDatabase/configure.sh
               inputs:
                 db_name: { get_property: [ SELF, name ] }
                 db_user: { get_property: [ SELF, user ] }
@@ -72,10 +72,10 @@ topology_template:
         - host: server
       interfaces:
         Standard:
-          create: Scripts/MYSQLDBMS/install.sh
-          start: Scripts/MYSQLDBMS/start.sh
+          create: ../Scripts/MYSQLDBMS/install.sh
+          start: ../Scripts/MYSQLDBMS/start.sh
           configure:
-            implementation: Scripts/MYSQLDBMS/configure.sh
+            implementation: ../Scripts/MYSQLDBMS/configure.sh
             inputs:
               root_password: { get_property: [ mysql_dbms, root_password ] }
 
@@ -85,8 +85,8 @@ topology_template:
         - host: server
       interfaces:
         Standard:
-          create: Scripts/WebServer/install.sh
-          start: Scripts/WebServer/start.sh
+          create: ../Scripts/WebServer/install.sh
+          start: ../Scripts/WebServer/start.sh
 
     server:
       type: tosca.nodes.Compute
diff --git a/toscaparser/tests/test_prereq.py b/toscaparser/tests/test_prereq.py
index f33eb93..f1ba365 100644
--- a/toscaparser/tests/test_prereq.py
+++ b/toscaparser/tests/test_prereq.py
@@ -13,6 +13,7 @@
 import os
 import zipfile
 
+from toscaparser.common.exception import URLException
 from toscaparser.common.exception import ValidationError
 from toscaparser.prereq.csar import CSAR
 from toscaparser.tests.base import TestCase
@@ -81,11 +82,60 @@ class CSARPrereqTest(TestCase):
         self.assertEqual(_('The "Entry-Definitions" file defined in the CSAR '
                            '"%s" does not exist.') % path, str(error))
 
+    def test_csar_invalid_import_path(self):
+        path = os.path.join(self.base_path,
+                            "data/CSAR/csar_wordpress_invalid_import_path.zip")
+        csar = CSAR(path)
+        error = self.assertRaises(ImportError, csar.validate)
+        self.assertEqual(_('Import Definitions/wordpress.yaml is not valid'),
+                         str(error))
+
+    def test_csar_invalid_import_url(self):
+        path = os.path.join(self.base_path,
+                            "data/CSAR/csar_wordpress_invalid_import_url.zip")
+        csar = CSAR(path)
+        error = self.assertRaises(URLException, csar.validate)
+        self.assertEqual(_('URLException "Failed to reach server '
+                           'https://raw.githubusercontent.com/openstack/'
+                           'tosca-parser/master/toscaparser/tests/data/CSAR/'
+                           'tosca_single_instance_wordpress/Definitions/'
+                           'wordpress1.yaml. Reason is : Not Found".'),
+                         str(error))
+
+    def test_csar_invalid_script_path(self):
+        path = os.path.join(self.base_path,
+                            "data/CSAR/csar_wordpress_invalid_script_path.zip")
+        csar = CSAR(path)
+        error = self.assertRaises(ValueError, csar.validate)
+        self.assertTrue(
+            str(error) == _('The resource Scripts/WordPress/install.sh does '
+                            'not exist.') or
+            str(error) == _('The resource Scripts/WordPress/configure.sh does '
+                            'not exist.'))
+
+    def test_csar_invalid_script_url(self):
+        path = os.path.join(self.base_path,
+                            "data/CSAR/csar_wordpress_invalid_script_url.zip")
+        csar = CSAR(path)
+        error = self.assertRaises(URLException, csar.validate)
+        self.assertEqual(_('URLException "The resource at '
+                           'https://raw.githubusercontent.com/openstack/'
+                           'tosca-parser/master/toscaparser/tests/data/CSAR/'
+                           'tosca_single_instance_wordpress/Scripts/WordPress/'
+                           'install1.sh cannot be accessed".'),
+                         str(error))
+
     def test_valid_csar(self):
         path = os.path.join(self.base_path, "data/CSAR/csar_hello_world.zip")
         csar = CSAR(path)
         self.assertIsNone(csar.validate())
 
+    def test_valid_csar_with_url_import_and_script(self):
+        path = os.path.join(self.base_path, "data/CSAR/csar_wordpress_with_url"
+                            "_import_and_script.zip")
+        csar = CSAR(path)
+        self.assertIsNone(csar.validate())
+
     def test_metadata_invalid_csar(self):
         path = os.path.join(self.base_path,
                             "data/CSAR/csar_metadata_not_yaml.zip")
diff --git a/toscaparser/utils/urlutils.py b/toscaparser/utils/urlutils.py
index e1b4056..c6633b1 100644
--- a/toscaparser/utils/urlutils.py
+++ b/toscaparser/utils/urlutils.py
@@ -15,6 +15,13 @@ from six.moves.urllib.parse import urljoin
 from six.moves.urllib.parse import urlparse
 from toscaparser.utils.gettextutils import _
 
+try:
+    # Python 3.x
+    import urllib.request as urllib
+except ImportError:
+    # Python 2.x
+    import urllib
+
 
 class UrlUtils(object):
 
@@ -41,3 +48,12 @@ class UrlUtils(object):
         if not UrlUtils.validate_url(url):
             raise ValueError(_("Provided URL is invalid."))
         return urljoin(url, relative_path)
+
+    @staticmethod
+    def url_accessible(url):
+        """Validates whether the given URL is accessible.
+
+        Returns true if the get call returns a 200 response code.
+        Otherwise, returns false.
+        """
+        return urllib.urlopen(url).getcode() == 200