First checkin for CSRF

(cherry picked from commit a01a767)
2016-11-19 08:22:20 +01:00
parent 0aa9c29256
commit c80bfcbc2f
7 changed files with 252 additions and 0 deletions
--- a/webgoat-lessons/csrf/src/main/resources/plugin/CSRF/js/xxe.js
+++ b/webgoat-lessons/csrf/src/main/resources/plugin/CSRF/js/xxe.js
@ -0,0 +1,15 @@
+webgoat.customjs.register = function () {
+    var xml = '<?xml version="1.0"?>' +
+        '<user>' +
+        '  <username>' + 'test' + '</username>' +
+        '  <password>' + 'test' + '</password>' +
+        '</user>';
+    return xml;
+}
+webgoat.customjs.registerJson = function () {
+    var json = '{' +
+        '  "user":' + '"test"' +
+        '  "password":' + '"test"' +
+        '}';
+    return json;
+}