dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

WEB-68 Service to return WebGoat Version and Build Number

Browse Source 
-- add email, email list, version number and build number as parameters to about page
This commit is contained in:
Rick Lawson 2014-09-15 08:17:40 -04:00
parent 0074b7e0e4
commit 9bb1cb8d9c
3 changed files with 33 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/main/java/org/owasp/webgoat/controller/Start.java
View File

@ -56,6 +56,9 @@ public class Start {
String contactEmail = servletContext.getInitParameter("email"); String contactEmail = servletContext.getInitParameter("email");
model.addObject("contactEmail", contactEmail); model.addObject("contactEmail", contactEmail);
String emailList = servletContext.getInitParameter("emaillist");
model.addObject("emailList", emailList);
Application app = Application.getInstance(); Application app = Application.getInstance();
logger.info("Setting application properties: " + app); logger.info("Setting application properties: " + app);
model.addObject("version", app.getVersion()); model.addObject("version", app.getVersion());

41
src/main/webapp/WEB-INF/pages/about.jsp
View File

@ -10,24 +10,27 @@
</div> </div>
<div class="modal-body modal-scroll"> <div class="modal-body modal-scroll">
<p>Thanks for hacking The Goat!</p> <p>Thanks for hacking The Goat!</p>
<p>WebGoat is a demonstration of common web application flaws. The <p>WebGoat is a demonstration of common web application flaws. The
associated exercises are intended to provide hands-on experience with associated exercises are intended to provide hands-on experience with
techniques aimed at demonstrating and testing application penetration. techniques aimed at demonstrating and testing application penetration.
</p> </p>
<p>From the entire WebGoat team, we appreciate your interest and efforts <p>From the entire WebGoat team, we appreciate your interest and efforts
in making applications not just better, but safer and more secure for in making applications not just better, but safer and more secure for
everyone. We, as well as our sacrificial goat, thank you.</p> everyone. We, as well as our sacrificial goat, thank you.</p>
<p>Version: 6.0</p> <p>
Version: ${version},&nbsp;Build: ${build}
</p>
<div class="row"> <div class="row">
<div class="col-md-6"> <div class="col-md-6">
<p>Contact us: <p>Contact us:
<ul> <ul>
<li>WebGoat mailing list: owasp-webgoat@lists.owasp.org</li> <li>WebGoat mailing list: ${emailList}</li>
<li>Bruce Mayhew: webgoat@owasp.org</li> <li>Bruce Mayhew: ${contactEmail}</li>
</ul> </ul>
</p> </p>
</div> </div>
</div> </div>
<div class="row"> <div class="row">
<div class="col-md-6"> <div class="col-md-6">
<p>WebGoat Authors <p>WebGoat Authors
@ -86,9 +89,9 @@
</ul> </ul>
</p> </p>
<p>Did we miss you? Our sincere apologies, as we know there have <p>Did we miss you? Our sincere apologies, as we know there have
been many contributors over the years. If your name does not been many contributors over the years. If your name does not
appear in any of the lists above, please send us a note. We'll appear in any of the lists above, please send us a note. We'll
get you added with no further sacrifices required.</p> get you added with no further sacrifices required.</p>
</div> </div>
</div> </div>
</div> </div>

9
src/main/webapp/WEB-INF/web.xml
View File

@ -27,12 +27,19 @@
--> -->
<context-param> <context-param>
<param-name>email</param-name> <param-name>email</param-name>
<param-value>WebGoat@owasp.org</param-value> <param-value>webgoat@owasp.org</param-value>
<description> <description>
The EMAIL address of the administrator to whom questions The EMAIL address of the administrator to whom questions
and comments about this application should be addressed. and comments about this application should be addressed.
</description> </description>
</context-param> </context-param>
<context-param>
<param-name>emaillist</param-name>
<param-value>owasp-webgoat@lists.owasp.org</param-value>
<description>
The EMAIL address of the webgoat email list
</description>
</context-param>
<!-- spring MVC --> <!-- spring MVC -->
<context-param> <context-param>
<param-name>contextConfigLocation</param-name> <param-name>contextConfigLocation</param-name>