dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Landing page incoming requests now look whether the referer is WebGoat (all incoming requests from WebGoat will now be logged)

Browse Source
This commit is contained in:
Nanne Baars
2017-09-13 00:22:52 +02:00
parent 109fe2c438
commit 94caba7eb1
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
webwolf/src/main/java/org/owasp/webwolf/requests/WebWolfTraceRepository.java
View File

@ -58,8 +58,8 @@ public class WebWolfTraceRepository implements TraceRepository {
@Override
public void add(Map<String, Object> map) {
Optional<String> host = getFromHeaders("host", map);
String path = (String) map.getOrDefault("path", "");
if (host.isPresent() && ("/".equals(path) || path.contains("challenge"))) {
Optional<String> referer = getFromHeaders("referer", map);
if (host.isPresent() && referer.orElse("").contains("WebGoat")) {
Optional<String> cookie = getFromHeaders("cookie", map);
cookie.ifPresent(c -> {
Optional<String> user = findUserBasedOnCookie(c);