dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix in case external site is down (#919)

Browse Source
This commit is contained in:
René Zubcevic 2021-01-11 20:15:23 +01:00 committed by GitHub
parent dea4a9d2a9
commit b219854f81
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
webgoat-lessons/ssrf/src/main/java/org/owasp/webgoat/ssrf/SSRFTask2.java
View File

@ -51,6 +51,7 @@ public class SSRFTask2 extends AssignmentEndpoint {
StringBuffer html = new StringBuffer(); StringBuffer html = new StringBuffer();
if (url.matches("http://ifconfig.pro")) { if (url.matches("http://ifconfig.pro")) {
try {
URL u = new URL(url); URL u = new URL(url);
URLConnection urlConnection = u.openConnection(); URLConnection urlConnection = u.openConnection();
BufferedReader in = new BufferedReader(new InputStreamReader(urlConnection.getInputStream())); BufferedReader in = new BufferedReader(new InputStreamReader(urlConnection.getInputStream()));
@ -60,6 +61,10 @@ public class SSRFTask2 extends AssignmentEndpoint {
html.append(inputLine); html.append(inputLine);
} }
in.close(); in.close();
} catch (Exception e) {
//in case the external site is down, the test and lesson should still be ok
html.append("<html><body>Altough the http://ifconfig.pro site is down, you still managed to solve this exercise the right way!</body></html>");
}
return success(this) return success(this)
.feedback("ssrf.success") .feedback("ssrf.success")