dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: move CSRF to A3 (#1776)

Browse Source 
CSRF is part of security misconfiguration in the OWASP Top 10.
This commit is contained in:
Nanne Baars 2024-03-21 20:50:37 +01:00 committed by GitHub
parent 1a6a7e0be1
commit 4ab820e1d1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 15 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
.github/workflows/semgrep.yml vendored Normal file
View File

30
src/main/java/org/owasp/webgoat/container/lessons/Category.java
View File

@ -34,30 +34,28 @@ import lombok.Getter;
* @since October 28, 2003
*/
public enum Category {
INTRODUCTION("Introduction", 5),
GENERAL("General", 100),
INTRODUCTION("Introduction"),
GENERAL("General"),
A1("(A1) Broken Access Control", 301),
A2("(A2) Cryptographic Failures", 302),
A3("(A3) Injection", 303),
A1("(A1) Broken Access Control"),
A2("(A2) Cryptographic Failures"),
A3("(A3) Injection"),
A5("(A5) Security Misconfiguration", 305),
A6("(A6) Vuln & Outdated Components", 306),
A7("(A7) Identity & Auth Failure", 307),
A8("(A8) Software & Data Integrity", 308),
A9("(A9) Security Logging Failures", 309),
A10("(A10) Server-side Request Forgery", 310),
A5("(A5) Security Misconfiguration"),
A6("(A6) Vuln & Outdated Components"),
A7("(A7) Identity & Auth Failure"),
A8("(A8) Software & Data Integrity"),
A9("(A9) Security Logging Failures"),
A10("(A10) Server-side Request Forgery"),
CLIENT_SIDE("Client side", 1700),
CLIENT_SIDE("Client side"),
CHALLENGE("Challenges", 3000);
CHALLENGE("Challenges");
@Getter private String name;
@Getter private Integer ranking;
Category(String name, Integer ranking) {
Category(String name) {
this.name = name;
this.ranking = ranking;
}
@Override

2
src/main/java/org/owasp/webgoat/lessons/csrf/CSRF.java
View File

@ -31,7 +31,7 @@ import org.springframework.stereotype.Component;
public class CSRF extends Lesson {
@Override
public Category getDefaultCategory() {
return Category.A10;
return Category.A5;
}
@Override