From 1e5e9c0b8bff6dddf3581ae359f9d182f4aa1e62 Mon Sep 17 00:00:00 2001 From: Rick Lawson Date: Fri, 12 Sep 2014 08:18:25 -0400 Subject: [PATCH 1/5] WEB-25 - Content for About Page WEB-24 - Unauthenticated access should redirect to login page --- src/main/webapp/WEB-INF/pages/about.jsp | 204 +++++++++----------- src/main/webapp/WEB-INF/pages/main_new.jsp | 3 +- src/main/webapp/WEB-INF/spring-security.xml | 1 + src/main/webapp/WEB-INF/web.xml | 2 +- src/main/webapp/css/main.css | 13 +- src/main/webapp/css/webgoat.css | 3 +- src/main/webapp/index.jsp | 3 + src/main/webapp/js/goatControllers.js | 2 +- 8 files changed, 108 insertions(+), 123 deletions(-) create mode 100644 src/main/webapp/index.jsp diff --git a/src/main/webapp/WEB-INF/pages/about.jsp b/src/main/webapp/WEB-INF/pages/about.jsp index 785761353..238607314 100644 --- a/src/main/webapp/WEB-INF/pages/about.jsp +++ b/src/main/webapp/WEB-INF/pages/about.jsp @@ -1,124 +1,92 @@ <%@ page contentType="text/html; charset=ISO-8859-1" language="java" errorPage=""%> - - - + -
- -

About WebGoat

-
-
-

Thank you for using WebGoat! This program is a demonstration of common web application flaws. - The exercises are intended to provide hands on experience with - application penetration testing techniques.

-

The WebGoat project is led - by Bruce Mayhew. Please send all comments to Bruce at [TODO, session was blowing up here for some reason].

- -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
OWASP Foundation
- 		-
Aspect Security
-
-
- WebGoat Authors
-
-
- Bruce Mayhew
-
-
- Jeff Williams
-
-

- WebGoat Design Team
- 		-

- V5.4 Lesson Contributers
-
-
David Anderson
-
Laurence Casey (Graphics)
-
Rogan Dawes
-
Bruce Mayhew
- 		-
Sherif Koussa
-
Yiannis Pavlosoglou
-
- -
-
Special Thanks - for V5.4
- 		-
Documentation - Contributers
-
-
Brian Ciomei (Multitude of bug fixes)
-
To all who have sent comments
- - 		-
- Erwin Geirnaert
-
- Aung Khant
-
- Sherif Koussa -
-
-
 
-
+
+
+ + +
+
+

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aenean quis posuere sapien, at ornare neque. Curabitur commodo efficitur ante, at finibus ex faucibus ut. Vivamus id diam blandit, convallis justo sed, vehicula sem. Cras a semper ex. Etiam dignissim tempus metus, sit amet blandit arcu pulvinar ac. Mauris dignissim rutrum ante sit amet posuere. Proin mollis sapien augue, at tempor metus iaculis eu. Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Cras elementum finibus tincidunt.

+

Version

+

OWASP Reference - probably text and image

+
+
+

WebGoat Authors +

    +
  • name...
    • +
  • name...
    • +
  • name...
    • +
+

+
+
+

WebGoat Design Team +

    +
  • name...
    • +
  • name...
    • +
  • name...
    • +
+

+
+
+
+
+

Active Contributors +

    +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
+

+
+
+

Past Contributors +

    +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
  • name... (Role)
    • +
+

+
+
+
+
+
-
 
-
 
-
 
-
WARNING
- While running this program, your machine is extremely vulnerable to - attack if you are not running on localhost. If you are NOT running on localhost (default configuration), You should disconnect from the network while using this program. -
-
- This program is for educational purposes only. Use of these techniques - without permission could lead to job termination, financial liability, - and/or criminal penalties.
-
- -
- - diff --git a/src/main/webapp/WEB-INF/pages/main_new.jsp b/src/main/webapp/WEB-INF/pages/main_new.jsp index e9637e245..dacee619f 100644 --- a/src/main/webapp/WEB-INF/pages/main_new.jsp +++ b/src/main/webapp/WEB-INF/pages/main_new.jsp @@ -350,10 +350,11 @@ } - + diff --git a/src/main/webapp/WEB-INF/spring-security.xml b/src/main/webapp/WEB-INF/spring-security.xml index 50f249aa6..ca19c1d4b 100644 --- a/src/main/webapp/WEB-INF/spring-security.xml +++ b/src/main/webapp/WEB-INF/spring-security.xml @@ -21,6 +21,7 @@ + diff --git a/src/main/webapp/WEB-INF/web.xml b/src/main/webapp/WEB-INF/web.xml index 52ab6756b..5d2c9720c 100644 --- a/src/main/webapp/WEB-INF/web.xml +++ b/src/main/webapp/WEB-INF/web.xml @@ -323,7 +323,7 @@ - login.mvc + index.jsp diff --git a/src/main/webapp/css/main.css b/src/main/webapp/css/main.css index aa8eb698e..703d62961 100644 --- a/src/main/webapp/css/main.css +++ b/src/main/webapp/css/main.css @@ -714,6 +714,17 @@ fieldset[disabled] .btn-warning.active { color: #fff; border: none; } + +/* ========================================================================== + Modal + ========================================================================== */ +.modal-footer .btn + .btn { + margin-bottom: 5px; +} +.modal .modal-body.modal-scroll { + max-height: 350px; + overflow-y: auto; +} /* ========================================================================== Media Queries ========================================================================== */ @@ -774,7 +785,7 @@ fieldset[disabled] .btn-warning.active { #topLinks { float:right; - margin-right:5px;s + margin-right:5px; margin-top:3px; } diff --git a/src/main/webapp/css/webgoat.css b/src/main/webapp/css/webgoat.css index 0aae04d38..dd61f086b 100644 --- a/src/main/webapp/css/webgoat.css +++ b/src/main/webapp/css/webgoat.css @@ -1,3 +1,4 @@ +/* body{ min-width: 800px; font-family: Arial,sans-serif; @@ -49,7 +50,7 @@ h5{ font-size: 100%; color: #334d55; } - +*/ ul{ list-style-type: square; } diff --git a/src/main/webapp/index.jsp b/src/main/webapp/index.jsp new file mode 100644 index 000000000..0db641a6f --- /dev/null +++ b/src/main/webapp/index.jsp @@ -0,0 +1,3 @@ +<%@ page session="false" %> +<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %> + diff --git a/src/main/webapp/js/goatControllers.js b/src/main/webapp/js/goatControllers.js index 157401a4e..8af941dc6 100644 --- a/src/main/webapp/js/goatControllers.js +++ b/src/main/webapp/js/goatControllers.js @@ -151,7 +151,7 @@ goat.controller('goatLesson', function($scope, $http, $modal, $log, $templateCac $scope.showAbout = function() { $('#aboutModal').modal({ - remote: 'about.mvc' + //remote: 'about.mvc' }); }; From 1e0460c6f29c9f91876e1a280620ec55ec69aba5 Mon Sep 17 00:00:00 2001 From: Bruce Mayhew Date: Fri, 12 Sep 2014 09:52:30 -0400 Subject: [PATCH 2/5] WEB-25 about content --- src/main/webapp/WEB-INF/pages/about.jsp | 94 ++++++++++++------------- 1 file changed, 45 insertions(+), 49 deletions(-) diff --git a/src/main/webapp/WEB-INF/pages/about.jsp b/src/main/webapp/WEB-INF/pages/about.jsp index 238607314..247451af8 100644 --- a/src/main/webapp/WEB-INF/pages/about.jsp +++ b/src/main/webapp/WEB-INF/pages/about.jsp @@ -6,28 +6,41 @@
- +
-

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aenean quis posuere sapien, at ornare neque. Curabitur commodo efficitur ante, at finibus ex faucibus ut. Vivamus id diam blandit, convallis justo sed, vehicula sem. Cras a semper ex. Etiam dignissim tempus metus, sit amet blandit arcu pulvinar ac. Mauris dignissim rutrum ante sit amet posuere. Proin mollis sapien augue, at tempor metus iaculis eu. Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Cras elementum finibus tincidunt.

-

Version

-

OWASP Reference - probably text and image

+

Thank you for using WebGoat! This program is a demonstration of common web application flaws. The exercises + are intended to provide hands on experience with application penetration testing techniques.

+

Version: 6.0

+
+
+

Contact us: +

    +
  • WebGoat mailing list: owasp-webgoat@lists.owasp.org
    • +
  • Bruce Mayhew: webgoat@owasp.org
    • +
+

+
+

WebGoat Authors

    -
  • name...
    • -
  • name...
    • -
  • name...
    • +
  • Bruce Mayhew (Project Lead)
    • +
  • Jeff Williams (Original Idea)
    • +
  • Richard Lawson (Architect)
    • +
  • Jason White (Architect)

WebGoat Design Team

    -
  • name...
    • -
  • name...
    • -
  • name...
    • +
  • Richard Lawson
    • +
  • Bruce Mayhew
    • +
  • Jason White
    • +
  • Ali Looney (User Interface)
    • +
  • Jeff Weyman (Website and Docs)

@@ -36,53 +49,36 @@

Active Contributors

    -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • +
  • Nanne Baars (Developer)
    • +
  • Dave Cowden (Everything)
    • +
  • Keith Gasser (Survey)
    • +
  • Li Simon (Developer)

Past Contributors

    -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • -
  • name... (Role)
    • +
  • David Anderson (Developer/Design)
    • +
  • Christopher Blum (Lessons)
    • +
  • Laurence Casey (Graphics)
    • +
  • Brian Ciomei (Bug fixes)
    • +
  • Rogan Dawes (Lessons)
    • +
  • Erwin Geirnaert (Solutions)
    • +
  • Aung Knant (Documentation)
    • +
  • Ryan Knell (Lessons)
    • +
  • Christine Koppeit (Build)
    • +
  • Sherif Kousa (Lessons/Documentation)
    • +
  • Reto Lippuner (Lessons)
    • +
  • PartNet (Lessons)
    • +
  • Yiannis Pavlosoglou (Lessons)
    • +
  • Eric Sheridan (Lessons)
    • +
  • Alex Smolen (Lessons)
    • +
  • Chuck Willis (Lessons)
    • +
  • Marcel Wirth (Lessons)

+

There have been many contributors over the years. If your name does not appear on the lists above, please send me a note.

From d7ed16296c5895de0b7b0dd49f036f993038b377 Mon Sep 17 00:00:00 2001 From: Jeff Date: Fri, 12 Sep 2014 10:32:40 -0400 Subject: [PATCH 3/5] WEB-25 updated text for about page. --- src/main/webapp/WEB-INF/pages/about.jsp | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/src/main/webapp/WEB-INF/pages/about.jsp b/src/main/webapp/WEB-INF/pages/about.jsp index 247451af8..b0a90b811 100644 --- a/src/main/webapp/WEB-INF/pages/about.jsp +++ b/src/main/webapp/WEB-INF/pages/about.jsp @@ -9,9 +9,17 @@
-

Thank you for using WebGoat! This program is a demonstration of common web application flaws. The exercises - are intended to provide hands on experience with application penetration testing techniques.

-

Version: 6.0

+

Thanks for hacking The Goat!

+

WebGoat is a demonstration of common web application flaws. The + associated exercises are intended to provide hands-on experience with + techniques aimed at demonstrating and testing application penetration. +

+

From the entire WebGoat team, we appreciate your interest and efforts + in making applications not just better, but safer and more secure for + everyone. We, as well as our sacrificial goat, thank you.

+

Version: 6.0

public void testName() throws Exception { + + }

Contact us: @@ -40,7 +48,7 @@

  • Bruce Mayhew
  • Jason White
  • Ali Looney (User Interface)
    • -
  • Jeff Weyman (Website and Docs)
    • +
  • Jeff Wayman (Website and Docs)

    • @@ -78,7 +86,10 @@
  • Marcel Wirth (Lessons)

    • -

    There have been many contributors over the years. If your name does not appear on the lists above, please send me a note.

    +

    Did we miss you? Our sincere apologies, as we know there have + been many contributors over the years. If your name does not + appear in any of the lists above, please send us a note. We'll + get you added with no further sacrifices required.

    From 39bf431ca2040b72f16be44298cb7b47fd2185a8 Mon Sep 17 00:00:00 2001 From: Bruce Mayhew Date: Fri, 12 Sep 2014 12:07:52 -0400 Subject: [PATCH 4/5] WEB-22 Added Spider Web Logo --- src/main/webapp/WEB-INF/pages/main_new.jsp | 2 +- src/main/webapp/css/img/logoBG.jpg | Bin 0 -> 17885 bytes src/main/webapp/css/main.css | 8 ++++---- 3 files changed, 5 insertions(+), 5 deletions(-) create mode 100644 src/main/webapp/css/img/logoBG.jpg diff --git a/src/main/webapp/WEB-INF/pages/main_new.jsp b/src/main/webapp/WEB-INF/pages/main_new.jsp index dacee619f..25c11ff42 100644 --- a/src/main/webapp/WEB-INF/pages/main_new.jsp +++ b/src/main/webapp/WEB-INF/pages/main_new.jsp @@ -57,7 +57,7 @@ - WebGoat V6.0 + WebGoat diff --git a/src/main/webapp/css/img/logoBG.jpg b/src/main/webapp/css/img/logoBG.jpg new file mode 100644 index 0000000000000000000000000000000000000000..cdc20d82e7f427930d316dd428f2e47d5653de33 GIT binary patch literal 17885 zcma%?b8scmx9?BvWMcbdV%zq_wmq?J+nU&RPHfvYC!E;Hyt(gp>)opN*Iiv*)wOr8 z-Me;m?N5K#TK#wJ?;hZrjD)lV01O-eF#UG`{$2u5#avBnJON+;NWgzJ0{&hDkcCa{ zjm-e2eg9g({%!(70AT-n1OFd`_<#1_?%-fx|9bzO|F7eJd-1mqfC>vx1l&M?p#s2B z!5~n<{tf{;003|Z0K~u1|IPIO8Z-<55()wq4h$R~?EmkBf(Af9g2TXq!NGq6{MR%f z{}~iGIKn?qFmMP+C{$h%zhC7)ul`vA`*)P{p~4O`PN3 z^Z(rq1qlNI2Ll21A74~R04Wr+uo4=ykz*iwVnIVc83xQei^$Es@;^UvR?J)Dq{abJ zHXsG;fr>Lb*53^PBE-K5qC%ho1Oa`U9(g+~^&0-A#o8Oa)cn+#Tx?dd?MJy~K$x-C z9>DEux0(GtCm71z$WIS2(BuSRWXoYg_I68+TvZ$ByZU5cxq^7ixeM@jo`Vw1 zpwcKUly{A|UhBPc9^z*+PMwxV^A*y5JjD@e`JrxnJiS5~a=AruckiVzWXK}s_feOy zWguJd%pw3zSvf2Jqv#mMPYPRB1p8c6&|WSHFSJg4%( zR(`;wkz0^7srKN=?HEsUot&{)J|($eY=hccr90xfM78un1gkH~KjhPT=j3>GSw3a> zJ=59BOfb_ICJPo)_44YNELMLPkue$MprYQMJ3WkKN>R#GC#ha$@FkZ#zPW$a0KD7d znolD=(VGBAYJOK(4@*0*urPwow40`0*Zm7{bw^o&z~TNJjA!dL+H48cRdn^{fHe{j zJ|wB|t6O?_OW~;X$`&3Mnmg+33ZHnDr8oxFT6p`}{RODQS!L5v?R2McJU9Ov-y$6Tx$PuQZEACz_ zLI=@JW>5yMp?H*4A%v?1%dA>>iy>JKK`W&h!lzzaAJ?DCm`V@{wz>_s&B#9rwx}b| zt6Cjpxrp#2KNlkxQS;q*8m!B+2VCDse1N58f6Ii4<3@&9=~rO=1k{);$M}mG7Hy4=t7Zbb6x1JPk`r4_4MWbUDDgtYSZ_q0k zR}g+gAET3zQwyCMl{|Gw&e9qNGR4ha-}>R5HRnZ&0@xrM4!_qR=xkLd9^*o!2hg^8 z#mB)uEH4;nO51ZdL)-b$5tSDI;T89W=6+W5ct+-_y%=HCl2UKg?r=_OPIP`Gl&D$6 zwM+6ZD(GV8b6)zUFVYc$dn`!+`_YZTRVSX>+*vlya98ClHfjRV=Dtt_%CId3uYdK< zkZss5ePj7#8QOSLClkz~PC;D?AMy+WBNzq0ss*;B$YSl_N9;Ka`kO!(+1Xyh47d@V zd&KQpPQp+^1Z_{OGGQ4HA7x;-L^gaDP~LY5!)S{s2$U}`iU_3g#3A^Ulos+$N}$em zBhMnwoX7QtHdI(^<9p&|v8@DCq`ECSu#e@AkUS;k((Sj_J`QPur=F*hny)B6;d#}v z<0Wej?Ek6@JX8M*P&~|O&8yVuy~$B?KUMl&O4Ga2;q}J&7LjuV!59Kf+@hBYbR%G4 z(Gu%F$o&%U+0WNZQfQ44v&fRv94)~}<`U9sA!(lj_tVAC-P6{2UGx!CF)WeZqy00G zT9UbBFWyo&fRp8nHwTb61v8M?qH63Op4>(vgp9|9J6;N3ZIzsHR})+Pq=J39X?LvN zn!Fj7T5V!Idxs{f?ob}tiFf+3;C9p#n0d=~*@xIT&K6I%z}Gl7T%4p~1#}ajyB=y{ zeo5{N8jfd0)BH2YLncu`4yK40fC15Fl-+j6NHn(T5=gUJ5L}I>pyq{I$KWTS9uq$p z3~E9x>BoA8nCs2WP*||Ve2co?J0UkOyWkeMHVX9zI2=a~4GkR_8>Ux1^LH-zRb~6> zNwVnwkXvW7)18EOmwKgwz-=(diLGqse;V75+#qjKzdTrqbOj^%UD37VJ3iCt%HHB#aT;nc0a))tE(= zbUEXkER0D~b&(6EkZm>dmNEe{fvW=+*q$K%t%_K~YD9K((;LCr(ZMo!L4FVV&YwGf z7J52t%Hp)9;fV;Hy@O88Eq4pwAKRVLpEeO;k?l+YA1WI~zn+jfpFBNsju|+o;57JS zkvz$`9YmH!w>gc0E?n;?i7@ar_#^f$zQT_F^3VZ1^GGU*Z3{t4O_XEtx&p`ZkiXtL zWAj~pL_Zzm_omaE8K$4@@-E$bxjKAk6ZUwLJH_jJ5O_Er?aFj!$WC0k#Wc9!t7c(n z5&vTe&r^6xXUY@978o-2r4z?q0+udYY5I~+1)@wtZreJz0q#7g7T z)=kp2W|l>eD0b>-WcSX1Sa0$pw13>Dtf+^oU5zpO7y0($HL`z&@u8DfoXTnm8-OnLEr$bS%TH%8e z(6M`X>Peo~3XHMafWcFIbKg_XtSOC0nH;wkJ7rm>nL?fjDt=a64Cs>)nBQ!|78N)d z6Y-aeqVQ35stdOKQNs+=_f_b0TyWY~?{dLWUVV=O3A1XTIf%f}UO76k)#_FQVp%{v zFT4JQb#>XQ;A{+1?7R+7GnON`jz1y zAUz=%=~_Qx4K^0FH|a~hzS+7_^w^EB zcA6pbsX$zKSXWh~t{x&q@PY}U4|m=-ZaTuM90ONov97%bBiA@sIYNn{g&I&kwqypf zwUS@33e+`MMmml3?M_WKnG)-%6*$VWGL}+(U?#D-fTS=bVhE`}K@Q%_apm<-Zewf5 zt#T~ujYrMh!s}{EF8dQ!VM=Q_5*K_E-0ZHw&KnChk&0aA%-qzNGz=6+F62!)!CUP# zP?;ix?`TY(Cs~#A=_iSelg;7StAe*9xiotH$;IzzZ&arRBT@V4_?+0iUFqA*C6H`p z_)KWoxF*XOt7C1-^d`&hlB^7jo=20I7c4bbWQ{5b(~_3hNRT_$pfHg$E2(s?VqW~*5&*yE_|c=R!$H3l)eYZrXk941 zzKof(pph|*&yz-y4;eVChXT1sUqd14Oln~cCWJA&sO`o4bK~=?%${aVqykMsYdxMF zD|I3tJ_`??@RUXs*Dhu$BjVNuZb7Hr+5tqOuu)t^k>By!@jEX#52By$E@+xL`C1YpZ-XTC!Q6+5b?d^M&yOR4$9KBoCllVib_3+xtJSh4@sLm3 zVC}e+GUI}=FU0-csHE_;D}Db5EcS;)&+vdjXp9>&B|17ZeyxNi$FPXPZ`%o0CX%2= zZA3lzJZQB@*OwbvMK&q&efT_ifMpaSC^>%E?Xcg?TOQ&CKltU}elGw0J6i*`a_H}p z%pa+yS~S}c{=;Qvh#c7RUX4YrjQvZ*3=E(YaVql})?{RoBY#di=3SkZ=?1Ck?~p7+ z$fZ>m82llJL7x%@PQ#LhUolz0=yCJN01pc}|NU76+Pd*@0<)N5(wI|GP{fvxgh%U! zqcivn6nB_O;F|CibpBI}>Oq&me;{R)n7Ec*dbNJFmKB;=Jz<)p+C)~z4<67c5>p;s zSPu9N{R=-^x;IUQJjL9kwbybWwM_Z<%E|?#ER94^04C9aGbM|Aa|QP$tad+fs~wu0}RyEn;id3;YBqmAet*PJ9-X92$&}|YQ(G3 z%?q=MfIai)O5*a5gkSLu1E=xfGx*QXbXFHy{?Fr%3gOJHcFxGPv)CH-8mFq_G?}q^ ziRt2VLe3&yis_WqXObwfy5k{lvjk|jvfnhJTiPLk%iC6q|KRvGLNyXzqh*O_QstQ* z57*Iwdz98XV+@Kx{rX6fdSsWfF4$Zr+C8NaZ@txGboR7c_olnz&<>@m-MFl?@$SsL zGQY*SP))vU%#Jp{{OJnU*nHPhI40=qY@za4rX-<%y=aGOi>6;`BZnYqhD6wmO>a*D zJJ#h$a}T{KIU7;Kyf;&}Smvv3qfpFr{_mrSX9JFiH&#Pwk!;DtBF#I{oSGAR%2gzQr?i^XAUe#?V2XY2zAyJJDaj zglG<^+r7u3I5uPah-~yAs;)v^RX=smcfOl&88q--%5Kg{J*iokf&0U{Bolqw@I*^H zZzypt!@FeG?S4F+g<$!J=%dZ8rR9MbqOOKSt)C%nl2>% zX$9ceNLhK!_39R=Nq+yJlX|<#L*VO*j)NG*qAjOn=hf?Tw!5`tOwZC}V6uxcniUJh zRW08}0n@9skt-va6kZxPTQgtQuIW5CY#Ci>dBR#ifsDEQnC@3w^{m{It=taT6W1-X5mip6`Rw^zx9Sp5h$r@3@#?7A@_b3h_jcIIR zfQK(<>lyuWwO;?~v;ByF$eVYwZ91|S8P8`%($cotjE+vH^asDR6L;SwUHW?oZh_(nod1l3u;*(xndj6G&-iNAd~Vp=vbR-wb9-bWcC9547Zr6{n&J z8phH8snRzOShthK1`OvO5ilJJtd6(uFSHBWloF3uGn0P-hUk;&M7~-@O`2>cfOHI_ z!R#x_`S^wO);tyOZoBU^4V-Ki@!$PB@`*m$4jQiFnARBIL+3SH3)?h(g*qv?0>=|d)t*QN^f&5wJB>c7E6~Xf~Jmw;=_%A(~!IvF4=>Jx#zQ@Uw!t^C1V(>0eoT17;(Dmyx7a)`W#LZy9EXs{Edy7& z@LDdX+%h{D$HRv;C)MioWnDKKX{WI@HIEwz2YC55ZTL zDIF9CSJ14PN*?2t6pW|Uh8tnb4*6Sv>%);Uc=@ZqWCCe1@_l5aCqb#Pu$N?=5i@!v zkz1Gt(^pkVCKMJI@6J_{+6&)Cn3O`6fw41P(Y0Ba0IOjLc~F?*q(q+j)opS1jl1sZ4Qu_aX$h|P32s2w23jlcT5SsE9SyhwY6dV#en z9;$E?kE*$&ByJ~d?XhpKd@RpPowjvLZnZHMR-p!qj5xn~?ru#&Lv zonv85w-g4(l>NSl-EUKG+V;Yd==&M>rMVbnXo;z_=jWK)aZoB!x=~mnzKE)xHP8evnVb z$b;?oqDMvs)8FHUGeg1{+}>*b780BwkBDUhp3UmRSyxRup@&%WYZ{z^?&uX7BWRywpxO!?GbL&!lW&0+?@Z7BUvGIjc!^ zU98S>T~2BDo|h%-jVnJ-oUlu~)5o+dtghEV#zxbX~xNEXF6u1K%6;wRpl|M#mA>XBZs-AFU-WU-icJMY#_E|;edgy zPLy-@=i(X73X2oYs{9r4CON@eq$K5=u*#S$G-esS0)cDYGI0gOS#7fY3f@VMK+U2c zKVkQcLgYb|YobX?6?hV9h9tVgu;)i#r8JvBMec^XeaF|dv%~W>$gwHAs%5oG`u*8P z(iW8FzC|=s+ibdt&9d2%IN5W8Pc~a^np?9jI1>6(LHlt@U4H{lzp2VawoJ)qDc!AF zfQv7Z=$cs+*9wMHFvTXTVa%CjY|msw@T;?shw);$D^Jcqx^=!KV$G8$e0F27aGR5> zP4g;m;+xOL-8?YTKVpRH7z8qgAN*4Mw>FLM6+1J#rq^avKc^2tm+s`a(X+GU!a?I# z-OHlZV^|+ICKsCBcDeg9?sO&AReWu02_vCs>?jZB-m!w}y^Ez5SSkfMYBN&fBrzvK zkO})*?dqjWR8#=RzknHEN`-Uen6vA$rZ`;JcZ8DqBq^cl`B}SX@;#_^C2a^grA#0d z2)RFlmHB>lhq6WPc5Tz1)xYM2E^D52h*TFL4%;vcHrNM}CQHmsXLCQvh zUQo+#E%ZgR*dipzxv_1V6+QfNOFcclXBojVIo@fAV8yW+Eschva&`Q2*vfjYN8-7> z8baPj?B8E`HYHM{6+h{0FCSrbow`&;;fs?{RWz?o5+^%9Y{kl z>5oxn)X$^Du`4d#Ddsx16~0I+t0B|$mAv;AJOe@ut9K|13C0|c{=PI2cfNfvkuO?u z+RoaPsPB2kU{MLM1~2+2z*LR%uC*X{ds_|{*o!c^NZSn*odd8aW+0>E3nu96n3-3Jq+FSMfV=s&hYzU&s5tez=( zo5;Q)9)`rGA}j6^Tsb<6HXJ~cD&oTCVa?FRAO_NDcSfls+QR`wQKg~(ewmXROnGMgL17hJnM5p1V&<6uOg{XM7j z9Df0$!?iga_4Nh71c+&bzW}gh(wn`KPXi6{uR9cr&Cn|X*f(R1gJkqQ*k|KBC&5od ze>z+H&rLp!n!kYQ&%i&!pA>%q%XwesPYeJq)UX(>GVB_sVji3G^&on-^VOwP75TiA zRRa_O?vbuLnp;DDkJ9~*HX?<25nsSBoM#Nwwynf`Yc;9YSOROo2tM?c-jlp#9I%BD zLZJU0XD6TwZjj+0I{q>2pV}J!uq{8|P~kGK;9=J(@69})Eu7FuBr4V|RtV1L(?JOF zkAAfv-*S72Eow$I>kKUoiTF*ajEe$|PrK%Kc1cO#e)eytXP1^TK}U|nzLP^Q_ppdR zB)DZVdnFQ(#f=ihx7!`E6CmevYHgD($8s5Cnj*}PiQvy)BD(x1_$>cH(I|F{r$O2T z_gBqKk9wB%o|8qS(t(?R9EGPUN|J+(mbgXSnZQx><;Rd0Q`y2Ik2psT=e=RV@tQOw z@(JY2z9&YbFrBl=6+r{fI6;JqX(A2_PvYLhpi-ZiaW$?S4gp&SU4)4PJW~OT2d@Oq zd!gy^@@;B4K?;b-?zB=x4U@;MVL&?E-&=kb z0{X~s|1-(+60bSJO8g*@ulA#w!Kw65#KJEDtl0)RCXM>{9fr$` zbXo|>iUQ19O}M3QiUJ$vU6**p!PAGH8Y`f(q=*77{0BjPeIl-?m@1a~5$!ElyvTdt zb(zgm907{AZ>~Gn&(F`4q+y0HHv|}2r;~S1=)EbU)3BZ6^;ORAD8$j-F+(RR+P}kG zLQfQ$QqM;AJ1JEz5cCMiSKq#0ikG8_9~Xvu+qo+vjObxtYP>g>V-kcXeDmpCB$i;0 zYfCyk`?G3GeA;3Dt**$1mA^~7Ac$I6lOYK%S1d`h(a94b)Se&9O_}E``g*4C541mi zkMGu>e_5rID!qd5oS)nE&ofkJOi?jU7YEh*?i_R5iF%tCX+ethYSxpGO_7imkL)_} zT8r%CMN4lZhsvgA$M>YEp2;4{@dT;zhL%_<-h9iB`{X9*_++xN>&&_G7qHuw+1h$~ zd1~iQw6G0F#Oi8PWtQH?^;wm;EaJL$hx+bD$zxIg0E#TYfQ#M{GIhZ_UTHyX>C-qIoU<* zuDZT2(r{$P*wwB=EY!s075r{d&(m@7*?nY&-Cd+_PCegZFzy=XX(qF{wu*HaqcWz2 zL@`M{U)8SE(6-K;PJc_aVHfl(#7S6#679`xOp8{Wwz45;9+J(lCzi=8AlLEw7Z5`og@65akq z59uDga&@w_%v%>wGi+#*(p5Km4;=9;8Q4dZ5i0t9{+*BFu?T1wMSPO~qMVzb~Gp<9}Pt zU49PaUmT9F+jU z^4Qb~_*gb$cEk{di9f{{FGcF{?1#<&<6X+$XnUf|$+_$?0}JWl$L)GE${2E*KAcUo zY>OQge;L3__@a!*UMoJo^2>*z4I!-SKT_sDJnA>r;NC*uGpV8k6`i?2Xtad6(Z%qs z-!5PgzgZl?K!W=$muS4+#LM`f2^0m`GCpie(H>j4IPs?GeIZl7i}r&1p!84u8xdz- z`hBLa0m0YJ?XfwP&#PxWaxVFk7UK?yk1fW*N@3~@G5pU!-wW}TKn!)qN4QFHFqK_G z@V`h$WyNPTg9k#`6t3-h&mmlgBeJXdC}J~74)}OnA~2;ceCcAoZk&t4eCw%cGw0W@ z!)~d%3(kZ7LKiWN%oy8>f@%6^hS=F zKH{?6)hnulmBo$914_-tlBQbb)WphFeo^PwB3u z>pA&P?VWC;W|k(@Pk(;eO(1>UO}SI@vRwmr@q6jxCd_sTE%?2*8kVA5ijb@;zCBbm zHOsE$Xw1FkE2IZaNmozX7DV!6CrP3{~AW> zjh!`5x40(wv$Z&BTyOIpzotJO?QxN0a;Mth=(SK?FF!XGT*(bzZ^u(45h!2tNprix zRpL**QIP6fU>!Ws?@SUb!U~;vxXN!(K9%!*Tdhc#etEm4cUl;QRuZ@i!y`U%PQ;mT zN39_=;bc}$j&yzP?RgC{yjkzg*}4J=a045hz81C~;&-nIuR@AnE`oWRK!`F+tX%5_ zx!gMW)pMi9%xsRlE;sI)XE`QiKacB|3u$k$;)H)WF2RhQD)5)R8UZ`ahw+Mm{`gSyUsTK=4CaGLoplcZB7Y$xgW5-O%dtc1Yi;x6(? zv6I#Dl?}A6{XKcyW)m^M3qciCSYoNAlEJ$WV9vZstmS_PaTXT7)bz=7UgaH0Aq9+6 z$P7GKv?KCRN?ZN|-%&V*Ym#PyE{ej<@b_O)lKt+g%|Xf5XOlBr_ULK;_4n1jXBdZ* zhD{U7221@d7K1HbL61|%OI)b={9!nxIcZ3XrT{v3ND8bvjYJIa8^gzRFk&HI50IdrBz&dxkdt%tQRAH0eClz1WuC# zsM35h4a11`bdAjO%3MpGox~)SaC|=Is>+v^`KpImT^|BBq1GedSGODcp%Uka*)5L{FRn2k;zOz;LV)h!=$6B=j^4) z#lw!AYBG1jzqFm{7WcHw1dQz3+B+;;vS{S7(SiHSLKH$2Ga>^VcTo(nOil!e`__BC zzE@|gBBKZeUe&7`XB4Y6wrIR$23d^F)Q-JEWzD$&f5xLPw_;Og=!8(_fK_Q6Dw@<^ zJ|}a7(!b3fc0q@!%9Rj0&cFCJaq-AiFjMgM7!th=U9N|Om}m+k&i?!jWsJJ!u^mdo zyS$vB$P->FzqWrAj5oJn@cJ*HowgWVuO>A%;!R86EX_ZFp96Cw>&2?C>g7vE>GT6C zI38W)q87)+^UGi4PV!!zBjyF3@p=(2r$6@hHJ_ifFf9i)nM#azgZRB#94dHN*01q)FuH zm5M0`Ww;la?IMDR>Kfb3>I{=;R-fr1WP~>Ja`!t4o?8V;yg?P*HP+30><|2idreQ2 zAT#D`e<%+^e?ZE%#muhPsPi!eRafie3bqq`$iYc>S_}6;px(j zzAoNsGFM)gH&exYqnRV>rmElx%yuXz!kWkb#P$BA(QL1_I*nK!?VXvz9&GbZSCwtC zjLPmY@Oa`mlt!v}gKZodzX-$IuHGFu)f(_Zqc{I8rcA}&phcO{B_)*3pd~wpPY;=( z4mQ{0aTMzEldnnjSfJ~9>E1c)QE=jM!CqKN8BYAvCVb!eoZZLH6!e_yJQo)BXxgn4 zJlba_9owP z#kyFQ=Y8i2aJEAs))tKzl$#u^8B3u~%MR<&Y$Hm{8m3XQI907A zb!XA+Q*PuEhH>4Ju^q@Q<-au!{`^Q8bhtQ9({_e5=5Ci?2EsejT-?k_za^qV=Yk3W10njj7dSI%$Y3so8j19*vmEi$>!cHYIBeG za(3wy-i(p@S-f(uY}<4G=c8NhHp5#B;cPDB5{u9{?V%c)rzP^cm2s>=Rm&SZq467X zLEECw`r|0pT-~txQCsFvjk;hc)~}%tcv)5W)p7q<82@=+!KzR0#g4M$pFH3@a`JBq z`=JpEWm;k@iBMwfr&-FA@Ie-dSWI!lR?9h8SCs8~-OmQ~ykI62Ev%iZZQQXr38Mr4G_0n`3;3v`oKj zQl)}Z+?>F~%j?R0r!LEE-_3TBR+~U}yX{@?{8zjiJJ?S9t!es?1uzcJ94A}Oi5#v6 zAc~0F%&Yev%B*vVaRTKGd!7&k)Z_(cl+KQ04D(RVQ%7E=yHzU!}X;8JVVjq+eJ;sgpQ}3vG_>?2o&fPf(dULHZzY!*4M;W z!^)JIIq(;-p++#^A%o9DZ7b6b00_BuX>Wi1U@0YDogpV6?rj zRZHW<&U1>x?r5#@AN(!r4H&t@vRJt*w9mRoFLYfz=kz|1BghavGd~k5C?yz}*@+7>gL(6s%aN4H<%!cW zw(hT#oaAS5#rJmFydVrF8UeMo3o*R8`LoQl51f(?Su~A=Wp5%8V2B`oCnFL5J+c59 z>q7r@n?|nhg$2CvoAV_V=PF=?{-7lm+^#AJFdG!jnx8@2Sv7U3dNJupWZ}!nQ`g=_pl9OKz{0fQ z5lwg2gL1BI=_|x(B56$Tle<8aR3;6O%#8Ekj{&zlMRjSFS`TwM9?&Opyb8jE>YmcT zKLESS&8xwmve4}{V~a|cS1C}Kl}T=`TBwTNeR@UM)?L|*-(G#9*=zbUgbB5u2)FY? z{T1IXr%Xv@!xF4fG-U2hwsdf9S=P3uZ}nvpU>r8{nqQE)W?9M<4G{2!&}BjF=87=P z>j~?*M&2~*N6hZ#=FbAg%h8R=VHDClqI7DxsBq_MBn?gzRfkitc8d&k zwWf@;DCzjp01tQ-+?G#X$@)-ZkOcO$ydq9k937H(D3$bj0#|oVvhDR5+2G0;?Xd|f zKQHEfmZb?TuBWo}GCy`5*$6w$Rs|Ckc%49fWiWDc!<>{6Uv^hpIPEXZ zh(D{|HKPA*pKSrm4Jlc*LIH9TY9*>k(4JAZqZ69C zvD-BaFzjgJd`iCES}UrVxJL75a+PRfhOY2~!j&kQ;NmuHtKJYA(!Zz6@~ zvSXiuGDz~j!o!jGhRv)YYi`H_ReJBXn3qEB*ma&b&OWqsvyg(yJh!0l96FLY>+Lm~ z*xJS_^%8$Vii)>f%nz|Vs;R(QaWmgT=D6OHYF|jD;$|^5W_=M0Ptvh7x`Pk_@_S^W_rcT?t4bOMWYU zAI5VhtY?Z%zQ_71@4#9=2m*YgAUgtP`o&s_%8UK!W7U7U-=j5eG!E-~dZJ(3)4{Zn zXLDyD=;enmc-wS+X~|il5R&>9oi9-j;QCc zI>oy0?3JGic3xE4+;%(XyVtvd(@$C6QiDw=*0w71csVQA1hL6AJ@o2_&wnK~njB4x z6Bk(qERwV;6S>=|eQ^?F5;vJBef-yx%e_p|Y4tl0`J)xfLq

    |XBk}SWMyA)Ad zZd6W4@l8k}(zHjZTKw?K(SG<`DJqT*2A8$)HCNkDX?CJfASB`jZ%j!bXW^tvRjMP@93BuRQ56ozod`4{kIH?S+_joC7PWfTXiPC-f* zMFEFLMG>eft_I)`vhUl{vclGD@2;AQZ z1q>`LrQ+j!9$(eop55XaR;?BM1$4UHmnU2aKLhdmi9AlKJRK)K!0*c}%)8pE3zOa% zS4lnQA7j1*)If_Z@&~i9lwz+k=?pUBw*MMi9bK`-DHXY?(FXD)mRO(PjPy$e14b39 z^1zOpmug|M-S*Mnr-k^SMK{BuePx9kjG%MSCpj_X%_$$VLS9rIM*r9!KJ9$}P_Mpj zE6$~aGAetLOKa(tS>$M*~#cR&bku!f1;;m0|w)U#e)sX^rU zL1xtQs?~+v(UPtRu%%0juWBlf(SM7|NXU+j>!C@{k`d9!l^ zTW@o~&3QT9#!V68*dfSZdRhD}J?CPxQUsKvyYBFcpjbVcu5x~JIrevg`NZr|A5Xs^ zJbL+TtCLt<@4a5##r#;0x)kRH;K%X_O~$%9e5Fkd5iGBTWd5o)r!%8GGOFg$on|^3 zi`%9f9Fq)qf!%r-R=n97J44jSF<`Hqvus5mjSg^Re3biRCb&z;N*;l(g!4ar1X|Ou7H*Uk`-j?HJuI!OL4OCW#~MyCDuqqem^=w6K@=2a zb>hrf);l}^^7Wm~ICn9dQoS8<9ti2pJl(cr@OXfh^nJ<=w8n*ERWX8%%cSsMRZ2)J z0tc;|6IL_VSa^3ig8VVwUMd2;=;w@kfW5SW+hX*u6d|I=u|4Q0pNiVczksJ}1mt0# zzDEKJTQ$bEn>~-{Ina%WUhhpEh9X5n*Ux|4QJCzfX4E~ zv@3Ca<%J86GRhCMlBD$lA=cbcnOJwL}7ronK zpMI)>tCGOv3Y_9+CtnZCMxrcZ5K?WkNVx`*))^1l(p{tDCPi37NPMrb z0$VkZ8S~6yoqZKLM6eEXoOH*q>mhj|xG@&U!3xilYsfjSBtx<89ET@xwd6Eapw{$Tlq9js zrfb-aPI*5?u#<*8RSlo?6QaXvo&L!k5|0x=UV$Yu&aK3IAUN$~tWSMx;JX3UQ!QYr zq2TA*BX@NZvk9aV79<7*?xw-F4q_r`E4RV}r#pXYR{k=F=iE!CN36mX4r3gawv4+P zPNXBZ6TqL^OZD+tcaLjHZJ7l)(|0eKjgX)eU?AJC$XM9#lD9k!5GwhHp@WkZ`U`aD zmfZpN&%bmm2zvsHgB>h|PW&il_J=N&wpDuZva>#a(qn9BdcsM?>l?4l@mEn6Hv@xQ z0D&v)Jb;S2?NM#~7(EDGEs_%gP*Au|R@1+$49`vT(Q9g@c5=ShkLXm%$`+Gd zp)Mg6|Gegv48-y8Ps}3(rJY;60r62aWY5dn|aLK*u1)%$RdF5 zw9Y=(KnJ+YXE#-?QHxCWkKb1et6CY?>gMqn`xvse<%%apKV9vL{*y?O-|eG zV=k4liS`GZ=iK&Fff+=*%glY)w|cqL`TWg4ac4fYl?%_aQE z$Z_SHbqh(0*$;>QUqJOE+oFdk@c>`wHRcOnF*vap=1g09G5(WF|GrwHsoS5h{YN! zar%fCa5#qof6WDh99c1IbMG+nL(<|5bqJ~0+q)hmtE}ga?&)kN%vxTv9}5LY9wIsg zbs=a&kz95HY%S{p%LlJDSuXo7wS@zM-K6oV3gZ{>%W4Kkh*-CSUSxA+zkUgN`gz6P z7yoB-5ROWR+I*U7ET-s5x^#sNO&hEcvTD ztgj>Ff7498BY&?H9XC|dzAY|eEF=A?bMRKmo!w??4k3HBdx zz&(FJ5h>I(;mgaLD9VF-EjCkl8B;NXjOHH&H7MrFLK220XRslKjd%cX3xbe(Y{i&; zDx_-1&t3}M+gdb1=M;uInhb}l3%Ygwr5(YJ$*Xla3sdnNwr17wCw3LDkPC-MMz%(&5wg{?23O)Ew1*0pU->Ja@_f!@+G=RK3eJc z4nBP5mljc5mi=$eTOUrB)K?kYUIaW6qx_*Tb+)%K%&@If17e*RQ=m?b2&Di}Lc|m# z3-AF@F&g**&w|!B{{S?6xZx`h-Tu6TeM8=npM4;1zV6BIo{Of}P*lzlp_-BlR|{A{82BCa1J^fO;qg=`3ZMl7fDPFB$IN}i;$mT;ws7?@R1WLUuTMg& z<0`OIBQuR+nPY7_tV{m@2x>Z4S3X5f*xN^G7xfFj*&f4ACwC3FP1Y~x)UJP`>6z5h zM%|XtU(p|niTFnX7oN}E&)jP^TcRY@YSmUID$x_*JUZlUKDQ%QKL7v&F7D;Lm&}vy z?i+yowwy3&nq|J1Z{)+9pS;`H`+(dxchsCdGT@dqF`2BU9#2yra$5SGULZrkCxAYr z4jLyq4K*WC%1g{-Z z3CdTIp^ao+7{Hp5GMPr5N{+)rsRNPV{j{T2UQ4K|7x9d|IOn_qd@z@PZhCF}-9F@p zfA-i^(}~@d;y~alo<43Z;Y$Yr!)@e%ScyzcEGoZkMEEkIfzv&o9eh<=^J;Y*OWjH< zRQYQlImT5R7rTl4vpAYogK?=z^ZKE0DUE1P#Qpoi`pDTqLxkkhOJZ3ko=28xU7kr~ wV$SZzR%T@skbN~PV literal 0 HcmV?d00001 diff --git a/src/main/webapp/css/main.css b/src/main/webapp/css/main.css index 703d62961..ad46de988 100644 --- a/src/main/webapp/css/main.css +++ b/src/main/webapp/css/main.css @@ -74,16 +74,16 @@ img { #header .brand { float: left; width: 240px; - min-height: 80px; - padding: 0 0 0 10px; + height: 80px; + padding: 0; position: relative; - background: #e84c3d url('img/logo.png') no-repeat 25px 26px; + background: url('img/logoBG.jpg') no-repeat 0px 0px; } #header .logo { color: #fff; font-size: 1.7em; text-transform: uppercase; - padding: 23px 0 0 57px; + padding: 23px 0 0 75px; display: inline-block; } #header .logo span { From 5f45e6e153caf3393be0d96994ef19c02d187869 Mon Sep 17 00:00:00 2001 From: Bruce Mayhew Date: Fri, 12 Sep 2014 12:23:12 -0400 Subject: [PATCH 5/5] WEB-25 removed exception text that was accidently pasted in --- src/main/webapp/WEB-INF/pages/about.jsp | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/src/main/webapp/WEB-INF/pages/about.jsp b/src/main/webapp/WEB-INF/pages/about.jsp index b0a90b811..08efb3a2b 100644 --- a/src/main/webapp/WEB-INF/pages/about.jsp +++ b/src/main/webapp/WEB-INF/pages/about.jsp @@ -17,9 +17,7 @@

    From the entire WebGoat team, we appreciate your interest and efforts in making applications not just better, but safer and more secure for everyone. We, as well as our sacrificial goat, thank you.

    -

    Version: 6.0

    public void testName() throws Exception { - - } +

    Version: 6.0

    Contact us: