dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

clean up and update js

Browse Source
This commit is contained in:
René Zubcevic
2020-04-07 20:17:20 +02:00
committed by Nanne Baars
parent c4ae9ae2ab
commit e25f7a7560
28 changed files with 112 additions and 10057 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
webgoat-lessons/vulnerable-components/src/main/resources/html/VulnerableComponents.html
View File

@ -42,7 +42,7 @@
<table>
<tr>
<td>Clicking go will execute a jquery-ui close dialog:</td>
<td><input name="closetext" value="" type="TEXT" /><input
<td><input id="closetext" value="OK<script>alert('XSS')</script>" type="TEXT" /><input
name="SUBMIT" value="Go!" type="SUBMIT" onclick="webgoat.customjs.vuln_jquery_ui()" /></td>
<td></td>
</tr>
@ -51,7 +51,7 @@
/*<![CDATA[*/
webgoat.customjs.vuln_jquery_ui = function()
{
webgoat.customjs.jquery('#dialog').dialog({ closeText: 'OK<script>alert("XSS")<\/script>' });
webgoat.customjs.jqueryVuln('#dialog').dialog({ closeText: webgoat.customjs.jquery('#closetext').val() });
};
/*]]>*/
</script>
@ -73,7 +73,7 @@
<table>
<tr>
<td>Clicking go will execute a jquery-ui close dialog:</td>
<td><input name="closetext" value="" type="TEXT" /><input
<td><input id="closetext2" value="OK<script>alert('XSS')</script>" type="TEXT" /><input
name="SUBMIT" value="Go!" type="SUBMIT" onclick="webgoat.customjs.jquery_ui()" /></td>
<td></td>
</tr>
@ -82,7 +82,7 @@
/*<![CDATA[*/
webgoat.customjs.jquery_ui = function()
{
webgoat.customjs.jquery('#dialog2').dialog({ closeText: 'OK' });
webgoat.customjs.jquery('#dialog2').dialog({ closeText: webgoat.customjs.jquery('#closetext2').val() });
};
/*]]>*/
</script>