dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Clicking on 'LAB: Role Based Access Control' produces 'Invalid Session' in UI #44

Browse Source
This commit is contained in:
Nanne Baars 2015-08-28 16:24:04 +02:00
parent a44e08cbfd
commit 2f43c16cc1
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
webgoat-container/src/main/java/org/owasp/webgoat/session/WebSession.java
View File

@ -842,13 +842,17 @@ public class WebSession {
} else if (al instanceof RandomLessonAdapter) { } else if (al instanceof RandomLessonAdapter) {
try { try {
RandomLessonAdapter rla = (RandomLessonAdapter) al; RandomLessonAdapter rla = (RandomLessonAdapter) al;
int stage = myParser.getIntParameter(STAGE) - 1; if (!myParser.getRawParameter(STAGE).equals("null")) {
String[] stages = rla.getStages(); int stage = myParser.getIntParameter(STAGE) - 1;
if (stages == null) { String[] stages = rla.getStages();
stages = new String[0]; if (stages == null) {
} stages = new String[0];
if (stage >= 0 && stage < stages.length) { }
rla.setStage(this, stages[stage]); if (stage >= 0 && stage < stages.length) {
rla.setStage(this, stages[stage]);
}
} else {
rla.setStage(this, null);
} }
} catch (ParameterNotFoundException pnfe) { } catch (ParameterNotFoundException pnfe) {
} }