dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

implementing support for dom xss

Browse Source
This commit is contained in:
Jason White
2016-11-23 17:24:59 -05:00
parent 5347311319
commit e183c8d8b3
3 changed files with 74 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
webgoat-container/src/main/resources/static/js/goatApp/view/GoatRouter.js
View File

@ -36,13 +36,36 @@ define(['jquery',
menuView: menuView
}),
setUpCustomJS: function () {
webgoat.customjs.jquery = $; //passing jquery into custom js scope ... still klunky, but works for now
// temporary shim to support dom-xss lesson
webgoat.customjs.phoneHome = function (e) {
console.log('phoneHome invoked');
console.log(arguments.callee);
//
webgoat.customjs.jquery.ajax({
method:"POST",
url:"/WebGoat/CrossSiteScripting/dom-xss",
data:{param1:42,param2:24},
headers:{
"webgoat-requested-by":"dom-xss-vuln"
},
contentType:'application/x-www-form-urlencoded; charset=UTF-8'
});
}
},
init:function() {
goatRouter = new GoatAppRouter();
this.lessonController.start();
// this.menuController.initMenu();
webgoat = {};
webgoat.customjs = {};
webgoat.customjs.jquery = $; //passing jquery into custom js scope ... still klunky, but works for now
this.setUpCustomJS();
goatRouter.on('route:lessonRoute', function(name) {
this.lessonController.loadLesson(name,0);