diff --git a/webgoat/main/build.xml b/webgoat/main/build.xml index be128c449..5f7f39391 100644 --- a/webgoat/main/build.xml +++ b/webgoat/main/build.xml @@ -56,7 +56,7 @@ - + diff --git a/webgoat/main/project/JavaSource/org/owasp/webgoat/HammerHead.java b/webgoat/main/project/JavaSource/org/owasp/webgoat/HammerHead.java index 09a3afd05..e302c34c3 100644 --- a/webgoat/main/project/JavaSource/org/owasp/webgoat/HammerHead.java +++ b/webgoat/main/project/JavaSource/org/owasp/webgoat/HammerHead.java @@ -59,6 +59,8 @@ import org.owasp.webgoat.session.WebgoatContext; public class HammerHead extends HttpServlet { + private static final String WELCOMED = "welcomed"; + /** * */ @@ -206,9 +208,9 @@ public class HammerHead extends HttpServlet // If this session has not seen the landing page yet, go there instead. HttpSession session = webSession.getRequest().getSession(); - if (session.getAttribute("welcomed") == null) + if (session.getAttribute(WELCOMED) == null) { - session.setAttribute("welcomed", "true"); + session.setAttribute(WELCOMED, "true"); page = "/webgoat.jsp"; } else @@ -432,6 +434,8 @@ public class HammerHead extends HttpServlet // Create new custom session and save it in the HTTP session // System.out.println( "HH Creating new WebSession: " ); session = new WebSession(webgoatContext, context); + // Ensure splash screen shows on any restart + hs.removeAttribute(WELCOMED); hs.setAttribute(WebSession.SESSION, session); // reset timeout hs.setMaxInactiveInterval(sessionTimeoutSeconds); diff --git a/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HowToWork.java b/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HowToWork.java index 25d971a64..1d83bd75d 100644 --- a/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HowToWork.java +++ b/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HowToWork.java @@ -78,7 +78,7 @@ public class HowToWork extends LessonAdapter */ public String getTitle() { - return ("How to work with Webgoat"); + return ("How to work with WebGoat"); } public Element getCredits() diff --git a/webgoat/main/project/WebContent/webgoat.jsp b/webgoat/main/project/WebContent/webgoat.jsp index 18e1192f0..090f4ff9c 100644 --- a/webgoat/main/project/WebContent/webgoat.jsp +++ b/webgoat/main/project/WebContent/webgoat.jsp @@ -18,11 +18,13 @@ WebSession webSession = ((WebSession) session.getAttribute("websession"));
-

Thank you for using WebGoat!

-

This program is a demonstration of common web application flaws. +

Thank you for using WebGoat! This program is a demonstration of common web application flaws. The exercises are intended to provide hands on experience with -application penetration testing techniques.

The WebGoat project is lead +application penetration testing techniques.

+

The WebGoat project is lead by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatContext().getFeedbackAddress()%>.

+

Thanks to Ounce Labs for supporting Bruce on the WebGoat Project.

+