dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ace editor text as request parameter

Browse Source
This commit is contained in:
Philippe Steinbach 2018-11-26 15:27:15 +01:00 committed by Nanne Baars
parent f209c424b4
commit 6327b82204
2 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/cross-site-scripting/src/main/resources/html/CrossSiteScriptingMitigation.html
View File

@ -18,7 +18,7 @@
<div> <div>
<div id="editor" style="position: absolute; top: 0; right: 0; bottom: 0; left: 0;" name="editor"></div> <div id="editor" style="position: absolute; top: 0; right: 0; bottom: 0; left: 0;" name="editor"></div>
<script th:src="@{/js/libs/ace/src-noconflict/ace.js}" type="text/javascript" charset="utf-8"></script> <script th:src="@{/js/libs/ace/src-noconflict/ace.js}" type="text/javascript" charset="utf-8"></script>
<script th:src="@{/lesson_js/assignment10b.js}" type="text/javascript" charset="utf-8"></script> <script th:src="@{/lesson_js/assignment3.js}" type="text/javascript" charset="utf-8"></script>
<script> <script>
var editor = ace.edit("editor"); var editor = ace.edit("editor");
editor.setTheme("ace/theme/monokai"); editor.setTheme("ace/theme/monokai");

16
webgoat-lessons/cross-site-scripting/src/main/resources/js/assignment3.js Normal file
View File

@ -0,0 +1,16 @@
function ace_collect() {
let code = "";
$(".ace_line").each(function(i, el) {
code += el.innerHTML;
});
console.log(code);
code = $(".ace_content")[0].innerHTML;
$.ajax({
type: "POST",
url: "/WebGoat/CrossSiteScripting/attack3",
dataType: "text",
data: {
editor: code
}
});
}