dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix WEB-151 - tolerate missing user cookie attribute in challenge stage2

Browse Source
This commit is contained in:
unknown 2014-09-20 01:37:51 -04:00
parent 3fd7b34536
commit ac410be6d9
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/main/java/org/owasp/webgoat/lessons/Challenge2Screen.java
View File

@ -210,7 +210,12 @@ public class Challenge2Screen extends SequentialLessonAdapter
.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE, ResultSet.CONCUR_READ_ONLY); .createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE, ResultSet.CONCUR_READ_ONLY);
// pull the USER_COOKIE from the cookies // pull the USER_COOKIE from the cookies
String cookie = URLDecoder.decode(getCookie(s),"utf-8"); String cookie = getCookie(s);
if (null == cookie) {
cookie = "";
} else {
cookie = URLDecoder.decode(cookie,"utf-8");
}
String user = Encoding.base64Decode(cookie); String user = Encoding.base64Decode(cookie);
String query = "SELECT * FROM user_data WHERE last_name = '" + user + "'"; String query = "SELECT * FROM user_data WHERE last_name = '" + user + "'";