dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Work-around to handle special chars in action ... currently to be able to match {userId} in hint creation/assignment for IDOR

Browse Source
This commit is contained in:
Jason White 2017-06-27 10:24:38 -04:00
parent dd18e68660
commit 89e2fc109c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-container/src/main/resources/static/js/goatApp/view/HintView.js
View File

@ -77,7 +77,7 @@ function($,
filterHint: function(endpoint) { filterHint: function(endpoint) {
var self = this; var self = this;
_.each(this.collection.models, function(hintModel) { _.each(this.collection.models, function(hintModel) {
if (endpoint.indexOf(hintModel.get('assignmentPath')) > -1) { if (endpoint.indexOf(hintModel.get('assignmentPath')) > -1 || decodeURIComponent(endpoint).indexOf(hintModel.get('assignmentPath')) > -1) {
self.hintsToShow.push(hintModel.get('hint')); self.hintsToShow.push(hintModel.get('hint'));
} }
}); });