dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: move CSRF to A3 (#1776)

Browse Source 
CSRF is part of security misconfiguration in the OWASP Top 10.
This commit is contained in:
Nanne Baars 2024-03-21 20:50:37 +01:00 committed by GitHub
parent 1a6a7e0be1
commit 4ab820e1d1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 15 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
.github/workflows/semgrep.yml vendored Normal file
View File

30
src/main/java/org/owasp/webgoat/container/lessons/Category.java
View File

@ -34,30 +34,28 @@ import lombok.Getter;
* @since October 28, 2003 * @since October 28, 2003
*/ */
public enum Category { public enum Category {
INTRODUCTION("Introduction", 5), INTRODUCTION("Introduction"),
GENERAL("General", 100), GENERAL("General"),
A1("(A1) Broken Access Control", 301), A1("(A1) Broken Access Control"),
A2("(A2) Cryptographic Failures", 302), A2("(A2) Cryptographic Failures"),
A3("(A3) Injection", 303), A3("(A3) Injection"),
A5("(A5) Security Misconfiguration", 305), A5("(A5) Security Misconfiguration"),
A6("(A6) Vuln & Outdated Components", 306), A6("(A6) Vuln & Outdated Components"),
A7("(A7) Identity & Auth Failure", 307), A7("(A7) Identity & Auth Failure"),
A8("(A8) Software & Data Integrity", 308), A8("(A8) Software & Data Integrity"),
A9("(A9) Security Logging Failures", 309), A9("(A9) Security Logging Failures"),
A10("(A10) Server-side Request Forgery", 310), A10("(A10) Server-side Request Forgery"),
CLIENT_SIDE("Client side", 1700), CLIENT_SIDE("Client side"),
CHALLENGE("Challenges", 3000); CHALLENGE("Challenges");
@Getter private String name; @Getter private String name;
@Getter private Integer ranking;
Category(String name, Integer ranking) { Category(String name) {
this.name = name; this.name = name;
this.ranking = ranking;
} }
@Override @Override

2
src/main/java/org/owasp/webgoat/lessons/csrf/CSRF.java
View File

@ -31,7 +31,7 @@ import org.springframework.stereotype.Component;
public class CSRF extends Lesson { public class CSRF extends Lesson {
@Override @Override
public Category getDefaultCategory() { public Category getDefaultCategory() {
return Category.A10; return Category.A5;
} }
@Override @Override