dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@456 4033779f-a91e-0410-96ef-6bf7bf53c507

Browse Source
This commit is contained in:
sherif.fathy 2012-04-24 16:18:15 +00:00
parent 9a5c004ca1
commit 05b9e0d045
1 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/main/java/org/owasp/webgoat/lessons/LogSpoofing.java
View File

@ -58,6 +58,7 @@ public class LogSpoofing extends LessonAdapter
private static final String USERNAME = "username"; private static final String USERNAME = "username";
private static final String PASSWORD = "password"; private static final String PASSWORD = "password";
public final static A MAC_LOGO = new A().setHref("http://www.softwaresecured.com").addElement(new IMG("images/logos/softwaresecured.gif").setAlt("Software Secured").setBorder(0).setHspace(0).setVspace(0)); public final static A MAC_LOGO = new A().setHref("http://www.softwaresecured.com").addElement(new IMG("images/logos/softwaresecured.gif").setAlt("Software Secured").setBorder(0).setHspace(0).setVspace(0));
@ -94,6 +95,7 @@ public class LogSpoofing extends LessonAdapter
ec.addElement(t); ec.addElement(t);
inputUsername = new String(s.getParser().getRawParameter(USERNAME, "")); inputUsername = new String(s.getParser().getRawParameter(USERNAME, ""));
if (inputUsername.length() != 0) if (inputUsername.length() != 0)
{ {
inputUsername = URLDecoder.decode(inputUsername, "UTF-8"); inputUsername = URLDecoder.decode(inputUsername, "UTF-8");
@ -107,13 +109,10 @@ public class LogSpoofing extends LessonAdapter
t2.addElement(row4); t2.addElement(row4);
ec.addElement(t2); ec.addElement(t2);
if (inputUsername.length() != 0 if (inputUsername.length() > 0 && inputUsername.indexOf('\n') >= 0 && inputUsername.indexOf('\n') >= 0)
&& inputUsername.toUpperCase().indexOf( {
System.getProperty("line.separator")
+ WebGoatI18N.get("LoginSucceededForUserName")+":") >= 0)
{
makeSuccess(s); makeSuccess(s);
} }
} catch (UnsupportedEncodingException e) } catch (UnsupportedEncodingException e)