diff --git a/main/project/JavaSource/org/owasp/webgoat/lessons/HttpSplitting.java b/main/project/JavaSource/org/owasp/webgoat/lessons/HttpSplitting.java index 1b571c284..fba87584d 100644 --- a/main/project/JavaSource/org/owasp/webgoat/lessons/HttpSplitting.java +++ b/main/project/JavaSource/org/owasp/webgoat/lessons/HttpSplitting.java @@ -65,8 +65,8 @@ public class HttpSplitting extends SequentialLessonAdapter public void handleRequest(WebSession s) { // Setting a special action to be able to submit to redirect.jsp - Form form = new Form("/WebGoat/lessons/General/redirect.jsp?" + "Screen=" + String.valueOf(getScreenId()) - + "&menu=" + getDefaultCategory().getRanking().toString(), Form.POST).setName("form").setEncType(""); + Form form = new Form(s.getRequest().getContextPath() + "/lessons/General/redirect.jsp?" + "Screen=" + String.valueOf(getScreenId()) + + "&menu=" + getDefaultCategory().getRanking().toString(), Form.POST).setName("form").setEncType(""); form.addElement(createContent(s)); diff --git a/main/project/WebContent/lessons/General/redirect.jsp b/main/project/WebContent/lessons/General/redirect.jsp index 4160e56e5..41e9abef1 100644 --- a/main/project/WebContent/lessons/General/redirect.jsp +++ b/main/project/WebContent/lessons/General/redirect.jsp @@ -7,10 +7,10 @@ HTTP Splitting -<% response.sendRedirect("/WebGoat/attack?" + - "Screen=" + request.getParameter("Screen") + - "&menu=" + request.getParameter("menu") + - "&fromRedirect=yes&language=" + request.getParameter("language")); +<% response.sendRedirect(request.getContextPath() + "/attack?" + + "Screen=" + request.getParameter("Screen") + + "&menu=" + request.getParameter("menu") + + "&fromRedirect=yes&language=" + request.getParameter("language")); %> \ No newline at end of file