dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Changes by Chris Roe to fix lesson issues with FireFox.

Browse Source 
git-svn-id: http://webgoat.googlecode.com/svn/trunk@371 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
mayhew64 2008-12-17 13:06:29 +00:00
parent 6d1158c40c
commit 9331ef0d9a
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/DOMInjection.java
View File

@ -110,8 +110,7 @@ public class DOMInjection extends LessonAdapter
+ lineSep + " }" + lineSep + " req.open('GET', url, true);" + lineSep + lineSep + " }" + lineSep + " req.open('GET', url, true);" + lineSep
+ " req.onreadystatechange = callback;" + lineSep + " req.send(null);" + lineSep + "}" + lineSep + " req.onreadystatechange = callback;" + lineSep + " req.send(null);" + lineSep + "}" + lineSep
+ "function callback() {" + lineSep + " if (req.readyState == 4) { " + lineSep + "function callback() {" + lineSep + " if (req.readyState == 4) { " + lineSep
+ " if (req.status == 200) { " + lineSep + " var message = req.responseText;" + " if (req.status == 200) { " + lineSep + " var message = req.responseText;" + lineSep
+ lineSep + " var result = req.responseXML.getElementsByTagName('reward');" + lineSep
+ " var messageDiv = document.getElementById('MessageDiv');" + lineSep + " try {" + lineSep + " var messageDiv = document.getElementById('MessageDiv');" + lineSep + " try {" + lineSep
+ " eval(message);" + lineSep + " " + lineSep + " eval(message);" + lineSep + " " + lineSep
+ " messageDiv.innerHTML = 'Correct licence Key.' " + lineSep + " }" + lineSep + " messageDiv.innerHTML = 'Correct licence Key.' " + lineSep + " }" + lineSep
@ -130,6 +129,7 @@ public class DOMInjection extends LessonAdapter
tr.addElement(new TD(new StringElement("License Key: "))); tr.addElement(new TD(new StringElement("License Key: ")));
Input input1 = new Input(Input.TEXT, KEY, ""); Input input1 = new Input(Input.TEXT, KEY, "");
input1.setID(KEY);
input1.addAttribute("onkeyup", "validate();"); input1.addAttribute("onkeyup", "validate();");
tr.addElement(new TD(input1)); tr.addElement(new TD(input1));
t1.addElement(tr); t1.addElement(tr);
@ -144,6 +144,7 @@ public class DOMInjection extends LessonAdapter
b.setType(Input.SUBMIT); b.setType(Input.SUBMIT);
b.setValue("Activate!"); b.setValue("Activate!");
b.setName("SUBMIT"); b.setName("SUBMIT");
b.setID("SUBMIT");
b.setDisabled(true); b.setDisabled(true);
tr.addElement(new TD(" ")); tr.addElement(new TD(" "));
tr.addElement(new TD(b)); tr.addElement(new TD(b));