dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

WEB-25 - Content for About Page

Browse Source 
WEB-24 - Unauthenticated access should redirect to login page
This commit is contained in:
Rick Lawson 2014-09-12 08:18:25 -04:00
parent c9e6d1f7a7
commit 1e5e9c0b8b
8 changed files with 108 additions and 123 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

192
src/main/webapp/WEB-INF/pages/about.jsp
View File

@ -1,124 +1,92 @@
<%@ page contentType="text/html; charset=ISO-8859-1" language="java" <%@ page contentType="text/html; charset=ISO-8859-1" language="java"
errorPage=""%> errorPage=""%>
<!-- Latest compiled and minified CSS --> <!-- This modal content is included into the main_new.jsp -->
<link rel="stylesheet" href="plugins/bootstrap/css/bootstrap.min.css"/>
<link rel="stylesheet" href="css/webgoat.css" type="text/css" />
<div class="modal-content">
<div class="modal-header"> <div class="modal-header">
<button type="button" class="close" data-dismiss="modal"><span aria-hidden="true">&times;</span><span class="sr-only">Close</span></button> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">&times;</button>
<h1 class="modal-title" id="myModalLabel">About WebGoat</h1> <h3 class="modal-title" id="myModalLabel">About WebGoat</h3>
</div> </div>
<div class="modal-body"> <div class="modal-body modal-scroll">
<p>Thank you for using WebGoat! This program is a demonstration of common web application flaws. <p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aenean quis posuere sapien, at ornare neque. Curabitur commodo efficitur ante, at finibus ex faucibus ut. Vivamus id diam blandit, convallis justo sed, vehicula sem. Cras a semper ex. Etiam dignissim tempus metus, sit amet blandit arcu pulvinar ac. Mauris dignissim rutrum ante sit amet posuere. Proin mollis sapien augue, at tempor metus iaculis eu. Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Cras elementum finibus tincidunt.</p>
The exercises are intended to provide hands on experience with <p>Version</p>
application penetration testing techniques. </p> <p>OWASP Reference - probably text and image</p>
<p>The WebGoat project is led <div class="row">
by Bruce Mayhew. Please send all comments to Bruce at [TODO, session was blowing up here for some reason].</p> <div class="col-md-6">
<p>WebGoat Authors
<div id="team"> <ul>
<table border="0" align="center" class="lessonText"> <li>name...</li>
<tr> <li>name...</li>
<td width="50%"> <li>name...</li>
<div align="center"><a href="http://www.owasp.org"><img </ul>
border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation" </p>
longdesc="http://www.owasp.org" /></a></div> </div>
</td> <div class="col-md-6">
<td width="50%"> <p>WebGoat Design Team
<div align="center"><a href="http://www.aspectsecurity.com"><img <ul>
border="0" src="images/logos/aspect.jpg" alt="Aspect Security" <li>name...</li>
longdesc="http://www.aspectsecurity.com" /></a></div> <li>name...</li>
</td> <li>name...</li>
</tr> </ul>
<tr> </p>
<td colspan="2"> </div>
<div align="center"><span class="style1"> </div>
WebGoat Authors </span></div> <div class="row">
</td> <div class="col-md-6">
</tr> <p>Active Contributors
<tr> <ul>
<td colspan="2"> <li>name... (Role)</li>
<div align="center"><span class="style2"> <li>name... (Role)</li>
Bruce Mayhew </span></div> <li>name... (Role)</li>
</td> <li>name... (Role)</li>
</tr> <li>name... (Role)</li>
<tr> <li>name... (Role)</li>
<td colspan="2"> <li>name... (Role)</li>
<div align="center"><span class="style2"> <li>name... (Role)</li>
Jeff Williams </span></div> <li>name... (Role)</li>
</td> <li>name... (Role)</li>
</tr> <li>name... (Role)</li>
<tr> <li>name... (Role)</li>
<td width="50%"> <li>name... (Role)</li>
<div align="center"><span class="style1"><br /> </ul>
WebGoat Design Team </span></div> </p>
</td> </div>
<td width="50%"> <div class="col-md-6">
<div align="center"><span class="style1"><br /> <p>Past Contributors
V5.4 Lesson Contributers </span></div> <ul>
</td> <li>name... (Role)</li>
</tr> <li>name... (Role)</li>
<tr> <li>name... (Role)</li>
<td valign="top"> <li>name... (Role)</li>
<div align="center" class="style2">David Anderson</div> <li>name... (Role)</li>
<div align="center" class="style2">Laurence Casey (Graphics)</div> <li>name... (Role)</li>
<div align="center" class="style2">Rogan Dawes</div> <li>name... (Role)</li>
<div align="center" class="style2">Bruce Mayhew</div> <li>name... (Role)</li>
</td> <li>name... (Role)</li>
<td valign="top"> <li>name... (Role)</li>
<div align="center" class="style2">Sherif Koussa</div> <li>name... (Role)</li>
<div align="center" class="style2">Yiannis Pavlosoglou</div> <li>name... (Role)</li>
<div align="center" class="style2"></div> <li>name... (Role)</li>
<li>name... (Role)</li>
</td> <li>name... (Role)</li>
</tr> <li>name... (Role)</li>
<tr> <li>name... (Role)</li>
<td height="25" valign="bottom"> <li>name... (Role)</li>
<div align="center"><span class="style1">Special Thanks <li>name... (Role)</li>
for V5.4</span></div> <li>name... (Role)</li>
</td> <li>name... (Role)</li>
<td height="25" valign="bottom"> <li>name... (Role)</li>
<div align="center"><span class="style1">Documentation <li>name... (Role)</li>
Contributers</span></div> <li>name... (Role)</li>
</td> <li>name... (Role)</li>
</tr> <li>name... (Role)</li>
<tr> </ul>
<td> </p>
<div align="center" class="style2">Brian Ciomei (Multitude of bug fixes)</div>
<div align="center" class="style2">To all who have sent comments</div>
</td>
<td>
<div align="center" class="style2">
<a href="http://www.zionsecurity.com/" target="_blank">Erwin Geirnaert</a></div>
<div align="center" class="style2">
<a href="http://yehg.org/" target="_blank">Aung Khant</a></div>
<div align="center" class="style2">
<a href="http://www.softwaresecured.com" target="blank">Sherif Koussa</a>
</div> </div>
</td>
</tr>
<tr>
<td>
<div align="center" class="style2">&nbsp;</div>
</td>
</tr>
</table>
</div> </div>
<div align="center" class="style2">&nbsp;</div>
<div align="center" class="style2">&nbsp;</div>
<div align="center" class="style2">&nbsp;</div>
<div id="warning">WARNING<br />
While running this program, your machine is extremely vulnerable to
attack if you are not running on localhost. If you are NOT running on localhost (default configuration), You should disconnect from the network while using this program.
<br />
<br />
This program is for educational purposes only. Use of these techniques
without permission could lead to job termination, financial liability,
and/or criminal penalties.</div>
</div> </div>
<div class="modal-footer"> <div class="modal-footer">
<button type="button" class="btn btn-default" data-dismiss="modal">Close</button> <button type="button" class="btn btn-default" data-dismiss="modal">Close</button>
</div> </div>
</div>

3
src/main/webapp/WEB-INF/pages/main_new.jsp
View File

@ -350,10 +350,11 @@
} }
</script> </script>
<!-- Modal --> <!-- About WebGoat Modal -->
<div class="modal fade" id="aboutModal" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <div class="modal fade" id="aboutModal" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
<div class="modal-dialog modal-lg"> <div class="modal-dialog modal-lg">
<div class="modal-content"> <div class="modal-content">
<jsp:include page="../pages/about.jsp"/>
</div> </div>
</div> </div>
</div> </div>

1
src/main/webapp/WEB-INF/spring-security.xml
View File

@ -21,6 +21,7 @@
<http use-expressions="true"> <http use-expressions="true">
<intercept-url pattern="/login.mvc" access="permitAll" /> <intercept-url pattern="/login.mvc" access="permitAll" />
<intercept-url pattern="/logout.mvc" access="permitAll" /> <intercept-url pattern="/logout.mvc" access="permitAll" />
<intercept-url pattern="/index.jsp" access="permitAll" />
<intercept-url pattern="/servlet/AdminServlet/**" access="hasAnyRole('ROLE_WEBGOAT_ADMIN','ROLE_SERVER_ADMIN')" /> <intercept-url pattern="/servlet/AdminServlet/**" access="hasAnyRole('ROLE_WEBGOAT_ADMIN','ROLE_SERVER_ADMIN')" />
<intercept-url pattern="/JavaSource/**" access="hasRole('ROLE_SERVER_ADMIN')" /> <intercept-url pattern="/JavaSource/**" access="hasRole('ROLE_SERVER_ADMIN')" />
<intercept-url pattern="/**" access="hasAnyRole('ROLE_WEBGOAT_USER','ROLE_WEBGOAT_ADMIN','ROLE_SERVER_ADMIN')" /> <intercept-url pattern="/**" access="hasAnyRole('ROLE_WEBGOAT_USER','ROLE_WEBGOAT_ADMIN','ROLE_SERVER_ADMIN')" />

2
src/main/webapp/WEB-INF/web.xml
View File

@ -323,7 +323,7 @@
</mime-mapping> </mime-mapping>
<welcome-file-list> <welcome-file-list>
<welcome-file>login.mvc</welcome-file> <welcome-file>index.jsp</welcome-file>
</welcome-file-list> </welcome-file-list>
</web-app> </web-app>

13
src/main/webapp/css/main.css
View File

@ -714,6 +714,17 @@ fieldset[disabled] .btn-warning.active {
color: #fff; color: #fff;
border: none; border: none;
} }
/* ==========================================================================
Modal
========================================================================== */
.modal-footer .btn + .btn {
margin-bottom: 5px;
}
.modal .modal-body.modal-scroll {
max-height: 350px;
overflow-y: auto;
}
/* ========================================================================== /* ==========================================================================
Media Queries Media Queries
========================================================================== */ ========================================================================== */
@ -774,7 +785,7 @@ fieldset[disabled] .btn-warning.active {
#topLinks { #topLinks {
float:right; float:right;
margin-right:5px;s margin-right:5px;
margin-top:3px; margin-top:3px;
} }

3
src/main/webapp/css/webgoat.css
View File

@ -1,3 +1,4 @@
/*
body{ body{
min-width: 800px; min-width: 800px;
font-family: Arial,sans-serif; font-family: Arial,sans-serif;
@ -49,7 +50,7 @@ h5{
font-size: 100%; font-size: 100%;
color: #334d55; color: #334d55;
} }
*/
ul{ ul{
list-style-type: square; list-style-type: square;
} }

3
src/main/webapp/index.jsp Normal file
View File

@ -0,0 +1,3 @@
<%@ page session="false" %>
<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
<c:redirect url="/login.mvc"/>

2
src/main/webapp/js/goatControllers.js
View File

@ -151,7 +151,7 @@ goat.controller('goatLesson', function($scope, $http, $modal, $log, $templateCac
$scope.showAbout = function() { $scope.showAbout = function() {
$('#aboutModal').modal({ $('#aboutModal').modal({
remote: 'about.mvc' //remote: 'about.mvc'
}); });
}; };