dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

activation button tested

Browse Source
This commit is contained in:
René Zubcevic 2020-12-09 17:40:33 +01:00 committed by Nanne Baars
parent bce4c775bf
commit 60c7fdd0db
3 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/xxe/src/main/java/org/owasp/webgoat/xxe/SimpleXXE.java
View File

@ -118,7 +118,7 @@ public class SimpleXXE extends AssignmentEndpoint {
if (applySecurity == null) {
request.getSession().setAttribute("applySecurity", "true");
}
return "xxe security will be applied";
return "xxe security patch is now applied, you can try the previous challenges and see the effect!";
}
}

11
webgoat-lessons/xxe/src/main/resources/html/XXE.html
View File

@ -1,6 +1,8 @@
<html xmlns:th="http://www.thymeleaf.org">
<script th:src="@{/lesson_js/xxe.js}" language="JavaScript"></script>
<header>
<script th:src="@{/lesson_js/xxe.js}"></script>
</header>
<body>
<div class="lesson-page-wrapper">
<div class="adoc-content" th:replace="doc:XXE_plan.adoc"></div>
@ -218,8 +220,9 @@
<div class="lesson-page-wrapper">
<div class="adoc-content" th:replace="doc:XXE_static_code_analysis.adoc"></div>
<a href="/WebGoat/xxe/applysecurity" onclick="javascript:return false;">Apply XXE security patch</a>
<br/>
<a id="submitlink" class="btn btn-primary" href="" onclick="javascript:$('#patchbutton').load('/WebGoat/xxe/applysecurity');return false;"><span id="patchbutton">Apply XXE security patch</span></a>
</div>
</body>
</html>

2
webgoat-lessons/xxe/src/main/resources/lessonPlans/en/XXE_static_code_analysis.adoc
View File

@ -14,7 +14,7 @@ SonarQube also shows you what you could do to fix this.
image::images/xxe-suggested-fix.png[XXE suggested fix]
If you click on the link below, you can try to do the XXE challenges again and you will notice that the vulnerabilities are mitigated.
If you click on the button below, you can try to do the XXE challenges again and you will notice that the vulnerabilities are mitigated.