dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add JavaScript to assignment otherwise you will not be able to see the flow of the endpoint

Browse Source
This commit is contained in:
Nanne Baars 2019-11-12 08:02:07 +01:00 committed by Nanne Baars
parent 1d477bd0e8
commit ba74898441
3 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/jwt/src/main/java/org/owasp/webgoat/jwt/JWTRefreshEndpoint.java
View File

@ -58,7 +58,7 @@ public class JWTRefreshEndpoint extends AssignmentEndpoint {
String user = (String) json.get("user"); String user = (String) json.get("user");
String password = (String) json.get("password"); String password = (String) json.get("password");
if ("Jerry".equals(user) && PASSWORD.equals(password)) { if ("Jerry".equalsIgnoreCase(user) && PASSWORD.equals(password)) {
return ok(createNewTokens(user)); return ok(createNewTokens(user));
} }
return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build(); return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build();

1
webgoat-lessons/jwt/src/main/resources/html/JWT.html
View File

@ -122,6 +122,7 @@ $(document).ready(
<link rel="stylesheet" type="text/css" th:href="@{/lesson_css/jwt.css}"/> <link rel="stylesheet" type="text/css" th:href="@{/lesson_css/jwt.css}"/>
<script th:src="@{/lesson_js/bootstrap.min.js}" language="JavaScript"></script> <script th:src="@{/lesson_js/bootstrap.min.js}" language="JavaScript"></script>
<script th:src="@{/lesson_js/jwt-buy.js}" language="JavaScript"></script> <script th:src="@{/lesson_js/jwt-buy.js}" language="JavaScript"></script>
<script th:src="@{/lesson_js/jwt-refresh.js}" language="JavaScript"></script>
<div class="attack-container"> <div class="attack-container">
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div> <div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
<form class="attack-form" accept-charset="UNKNOWN" <form class="attack-form" accept-charset="UNKNOWN"

3
webgoat-lessons/sol.MD
View File

@ -1,3 +1,6 @@
https://github.com/WebGoat/WebGoat/wiki/(Almost)-Fully-Documented-Solution-(en)
### SQLi ### ### SQLi ###
Basic Basic