From 12a4e912855500c205636fac103e84ff8cf3d788 Mon Sep 17 00:00:00 2001 From: "mayhew64@gmail.com" Date: Mon, 9 Nov 2009 01:49:41 +0000 Subject: [PATCH] General cleanup of lesson, removed sub credit from csrf lesson, add cam credit as lesson contributor git-svn-id: http://webgoat.googlecode.com/svn/trunk@409 4033779f-a91e-0410-96ef-6bf7bf53c507 --- .../owasp/webgoat/lessons/CsrfPromptByPass.java | 15 --------------- .../owasp/webgoat/lessons/CsrfTokenByPass.java | 16 ---------------- webgoat/src/main/webapp/webgoat.jsp | 16 +++++++--------- 3 files changed, 7 insertions(+), 40 deletions(-) diff --git a/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfPromptByPass.java b/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfPromptByPass.java index a4fcbc0f2..7fdd5b71e 100644 --- a/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfPromptByPass.java +++ b/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfPromptByPass.java @@ -1,10 +1,6 @@ package org.owasp.webgoat.lessons; -import java.sql.Connection; -import java.sql.PreparedStatement; -import java.sql.ResultSet; -import java.sql.Statement; import java.util.ArrayList; import java.util.List; @@ -18,16 +14,7 @@ import org.apache.ecs.html.B; import org.apache.ecs.html.BR; import org.apache.ecs.html.Form; import org.apache.ecs.html.H1; -import org.apache.ecs.html.HR; -import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; -import org.apache.ecs.html.P; -import org.apache.ecs.html.TD; -import org.apache.ecs.html.TR; -import org.apache.ecs.html.Table; -import org.apache.ecs.html.TextArea; -import org.owasp.webgoat.session.DatabaseUtilities; -import org.owasp.webgoat.session.ECSFactory; import org.owasp.webgoat.session.WebSession; import org.owasp.webgoat.util.HtmlEncoder; @@ -193,8 +180,6 @@ public class CsrfPromptByPass extends CSRF ElementContainer credits = new ElementContainer(); credits.addElement(new StringElement("Contributed by ")); credits.addElement(partnet); - credits.addElement(new BR()); - credits.addElement(new StringElement("Derived from Sherif Koussa's CSRF Lesson")); return credits; } } diff --git a/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfTokenByPass.java b/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfTokenByPass.java index ff2d28e55..b5a1a13e8 100644 --- a/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfTokenByPass.java +++ b/webgoat/src/main/java/org/owasp/webgoat/lessons/CsrfTokenByPass.java @@ -2,10 +2,6 @@ package org.owasp.webgoat.lessons; import java.security.SecureRandom; -import java.sql.Connection; -import java.sql.PreparedStatement; -import java.sql.ResultSet; -import java.sql.Statement; import java.util.ArrayList; import java.util.List; import java.util.Random; @@ -20,17 +16,7 @@ import org.apache.ecs.html.B; import org.apache.ecs.html.BR; import org.apache.ecs.html.Form; import org.apache.ecs.html.H1; -import org.apache.ecs.html.H2; -import org.apache.ecs.html.HR; -import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; -import org.apache.ecs.html.P; -import org.apache.ecs.html.TD; -import org.apache.ecs.html.TR; -import org.apache.ecs.html.Table; -import org.apache.ecs.html.TextArea; -import org.owasp.webgoat.session.DatabaseUtilities; -import org.owasp.webgoat.session.ECSFactory; import org.owasp.webgoat.session.WebSession; import org.owasp.webgoat.util.HtmlEncoder; @@ -174,8 +160,6 @@ public class CsrfTokenByPass extends CsrfPromptByPass ElementContainer credits = new ElementContainer(); credits.addElement(new StringElement("Contributed by ")); credits.addElement(partnet); - credits.addElement(new BR()); - credits.addElement(new StringElement("Derived from Sherif Koussa's CSRF Lesson")); return credits; } } diff --git a/webgoat/src/main/webapp/webgoat.jsp b/webgoat/src/main/webapp/webgoat.jsp index 090f4ff9c..2f151aa07 100644 --- a/webgoat/src/main/webapp/webgoat.jsp +++ b/webgoat/src/main/webapp/webgoat.jsp @@ -23,7 +23,6 @@ The exercises are intended to provide hands on experience with application penetration testing techniques.

The WebGoat project is lead by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatContext().getFeedbackAddress()%>.

-

Thanks to Ounce Labs for supporting Bruce on the WebGoat Project.

@@ -46,7 +45,7 @@ by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatCo @@ -57,9 +56,8 @@ by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatCo
Laurence Casey (Graphics)
@@ -67,7 +65,7 @@ by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatCo @@ -111,7 +109,7 @@ by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatCo
 
WARNING
While running this program, your machine is extremely vulnerable to -attack. You should disconnect from the network while using this program. +attack if you are not running on localhost. If tou are NOT running on localhost (default configuration), You should disconnect from the network while using this program.

This program is for educational purposes only. Use of these techniques

- Lesson Contributers
+ V5.3 Lesson Contributers
-
Aspect Security
-
Sherif Koussa
-
Romain Brechet
+
Chuck Willis
+
Cam Morris
Special Thanks - for V5.2
+ for V5.3
Documentation @@ -76,8 +74,8 @@ by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatCo
-
Reto Lippuner
-
Marcel Wirth
+
Christine (Maven)
+
Marek Jawurek (Internationalization)

To all who have sent comments