Added the resource bundles in the already present WebGoatLabels.properties temporary workaround

This commit is contained in:
nbaars 2015-01-07 17:34:33 +01:00
parent 744630ca4c
commit 3d8a345264
3 changed files with 20 additions and 1 deletions

View File

@ -1,10 +1,11 @@
package org.owasp.webgoat.util; package org.owasp.webgoat.util;
import org.springframework.stereotype.Component;
import java.util.HashMap; import java.util.HashMap;
import java.util.Locale; import java.util.Locale;
import java.util.ResourceBundle; import java.util.ResourceBundle;
import org.springframework.stereotype.Component;
/*************************************************************************************************** /***************************************************************************************************
@ -52,6 +53,10 @@ public class LabelProvider
return labels.get(locale).getString(strName); return labels.get(locale).getString(strName);
} }
public void addLabels() {
}
private class WebGoatResourceBundleController extends ResourceBundle.Control private class WebGoatResourceBundleController extends ResourceBundle.Control
{ {
private final Locale fallbackLocale = new Locale(DEFAULT_LANGUAGE); private final Locale fallbackLocale = new Locale(DEFAULT_LANGUAGE);

View File

@ -4,4 +4,18 @@ RestartLesson=Restart this Lesson
SolutionVideos=Solution Videos SolutionVideos=Solution Videos
ErrorGenerating=Error generating ErrorGenerating=Error generating
InvalidData=Invalid Data InvalidData=Invalid Data
Go!=Go!
#StringSqlInjection.java
StringSqlInjectionSecondStage=Now that you have successfully performed an SQL injection, try the same type of attack on a parameterized query. Restart the lesson if you wish to return to the injectable query.
EnterLastName=Enter your last name:
NoResultsMatched=No results matched. Try Again.
SqlStringInjectionHint1=The application is taking your input and inserting it at the end of a pre-formed SQL command.
SqlStringInjectionHint2=This is the code for the query being built and issued by WebGoat:<br><br> "SELECT * FROM user_data WHERE last_name = "accountName"
SqlStringInjectionHint3=Compound SQL statements can be made by joining multiple tests with keywords like AND and OR. Try appending a SQL statement that always resolves to true
SqlStringInjectionHint4=Try entering [ smith' OR '1' = '1 ].