dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Resolve HttpOnly Test bug WEB-161

Browse Source
This commit is contained in:
Nina Alex Juliadotter 2014-12-09 20:52:35 +11:00
parent e77dda3f22
commit e0da681402
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/main/java/org/owasp/webgoat/lessons/HttpOnly.java
View File

@ -61,6 +61,8 @@ public class HttpOnly extends LessonAdapter
private final static String HTTPONLY = "httponly"; private final static String HTTPONLY = "httponly";
private final static String HTTPONLY_VALUE = "httponly_value";
private final static String ACTION = "action"; private final static String ACTION = "action";
private final static String READ = "Read Cookie"; private final static String READ = "Read Cookie";
@ -239,6 +241,7 @@ public class HttpOnly extends LessonAdapter
{ {
ElementContainer ec = new ElementContainer(); ElementContainer ec = new ElementContainer();
Element r = null; Element r = null;
Element hidden_r = null;
Table t = null; Table t = null;
TR tr = null; TR tr = null;
Form f = null; Form f = null;
@ -266,11 +269,12 @@ public class HttpOnly extends LessonAdapter
if (httpOnly == true) if (httpOnly == true)
{ {
r = new Input(Input.RADIO, HTTPONLY, "True").addAttribute("Checked", "true"); r = new Input(Input.RADIO, HTTPONLY_VALUE, "True").addAttribute("Checked", "true");
} }
else else
{ {
r = new Input(Input.RADIO, HTTPONLY, "True").addAttribute("onClick", "document.form.submit()"); r = new Input(Input.RADIO, HTTPONLY_VALUE, "True").addAttribute("onClick", "document.form.httponly.click();");
hidden_r = new Input(Input.SUBMIT, HTTPONLY, "True").addAttribute("style", "visibility:hidden");
} }
tr.addElement(new TD(r)); tr.addElement(new TD(r));
@ -279,14 +283,16 @@ public class HttpOnly extends LessonAdapter
if (httpOnly == false) if (httpOnly == false)
{ {
r = new Input(Input.RADIO, HTTPONLY, "False").addAttribute("Checked", "True"); r = new Input(Input.RADIO, HTTPONLY_VALUE, "False").addAttribute("Checked", "false");
} }
else else
{ {
r = new Input(Input.RADIO, HTTPONLY, "False").addAttribute("onClick", "document.form.submit()"); r = new Input(Input.RADIO, HTTPONLY_VALUE, "False").addAttribute("onClick", "document.form.httponly.click();");
hidden_r = new Input(Input.SUBMIT, HTTPONLY, "False").addAttribute("style", "visibility:hidden");
} }
tr.addElement(new TD(r)); tr.addElement(new TD(r));
tr.addElement(hidden_r);
r = new Input(Input.HIDDEN, READ_RESULT, ""); r = new Input(Input.HIDDEN, READ_RESULT, "");
tr.addElement(r); tr.addElement(r);