From 61de52840f634bf081a5d7b48a01d1baa8eaf610 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 30 Jul 2023 15:10:31 +0200 Subject: [PATCH] chore: bump com.diffplug.spotless:spotless-maven-plugin from 2.33.0 to 2.38.0 (#1535) * chore: bump com.diffplug.spotless:spotless-maven-plugin Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 2.33.0 to 2.38.0. - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](https://github.com/diffplug/spotless/compare/lib/2.33.0...lib/2.38.0) --- updated-dependencies: - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] * chore: format code --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Nanne Baars --- pom.xml | 2 +- .../webgoat/lessons/authbypass/AccountVerificationHelper.java | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 33ff93e95..5e45e318c 100644 --- a/pom.xml +++ b/pom.xml @@ -532,7 +532,7 @@ com.diffplug.spotless spotless-maven-plugin - 2.33.0 + 2.38.0 diff --git a/src/main/java/org/owasp/webgoat/lessons/authbypass/AccountVerificationHelper.java b/src/main/java/org/owasp/webgoat/lessons/authbypass/AccountVerificationHelper.java index 41b64d518..4de8d5ef7 100644 --- a/src/main/java/org/owasp/webgoat/lessons/authbypass/AccountVerificationHelper.java +++ b/src/main/java/org/owasp/webgoat/lessons/authbypass/AccountVerificationHelper.java @@ -42,6 +42,7 @@ public class AccountVerificationHelper { static { secQuestionStore.put(verifyUserId, userSecQuestions); } + // end 'data store set up' // this is to aid feedback in the attack process and is not intended to be part of the @@ -68,6 +69,7 @@ public class AccountVerificationHelper { return likely; } + // end of cheating check ... the method below is the one of real interest. Can you find the flaw? public boolean verifyAccount(Integer userId, HashMap submittedQuestions) {