Changed mac_Logo.gif to macadamian.gif. Added forced browsing servlet to the appropriate web.xml files. Enhanced readme files
git-svn-id: http://webgoat.googlecode.com/svn/trunk@109 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
@ -63,7 +63,7 @@ public class BackDoors extends LessonAdapter
|
||||
|
||||
private final static String SELECT_ST = "select userid, password, ssn, salary from employee where userid=";
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
protected Element createContent(WebSession s)
|
||||
|
@ -68,7 +68,7 @@ public class CSRF extends LessonAdapter {
|
||||
private static Connection connection = null;
|
||||
private static int count = 1;
|
||||
private final static int USER_COL = 4; // Added by Chuck Willis - used to show user who posted message
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
/**
|
||||
|
@ -56,7 +56,7 @@ public class DOMInjection extends LessonAdapter
|
||||
|
||||
private final static String KEY = "key";
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
protected Element createContent(WebSession s)
|
||||
|
@ -53,7 +53,7 @@ public class ForcedBrowsing extends LessonAdapter
|
||||
|
||||
private final static String SUCCEEDED = "succeeded";
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
/**
|
||||
|
@ -55,7 +55,7 @@ public class HttpSplitting extends LessonAdapter
|
||||
|
||||
private static String STAGE = "stage";
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
/**
|
||||
|
@ -60,7 +60,7 @@ public class JSONInjection extends LessonAdapter
|
||||
|
||||
private final static String TRAVEL_TO = "travelTo";
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
public void handleRequest(WebSession s)
|
||||
|
@ -58,7 +58,7 @@ public class LogSpoofing extends LessonAdapter
|
||||
|
||||
private static final String PASSWORD = "password";
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
protected Element createContent(WebSession s)
|
||||
|
@ -40,7 +40,7 @@ import org.owasp.webgoat.session.WebSession;
|
||||
*/
|
||||
public class NewLesson extends LessonAdapter
|
||||
{
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
/**
|
||||
|
@ -60,7 +60,7 @@ public class SilentTransactions extends LessonAdapter
|
||||
|
||||
private final static Double CURRENT_BALANCE = 11987.09;
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
public void handleRequest(WebSession s)
|
||||
|
@ -60,7 +60,7 @@ public class XMLInjection extends LessonAdapter
|
||||
|
||||
public static HashMap rewardsMap = new HashMap();
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
protected static HashMap init()
|
||||
|
@ -78,7 +78,7 @@ public class XPATHInjection extends LessonAdapter
|
||||
|
||||
private final static String PASSWORD = "Password";
|
||||
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/mac_Logo.gif").setAlt(
|
||||
private final static IMG MAC_LOGO = new IMG("images/logos/macadamian.gif").setAlt(
|
||||
"Macadamian Technologies").setBorder(0).setHspace(0).setVspace(0);
|
||||
|
||||
protected Element createContent(WebSession s)
|
||||
|
@ -174,6 +174,10 @@
|
||||
<servlet-class>org.owasp.webgoat.LessonSource</servlet-class>
|
||||
</servlet>
|
||||
|
||||
<servlet>
|
||||
<servlet-name>conf</servlet-name>
|
||||
<jsp-file>/lessons/ConfManagement/config.jsp</jsp-file>
|
||||
</servlet>
|
||||
<!-- Define mappings that are used by the servlet container to
|
||||
translate a particular request URI (context-relative) to a
|
||||
particular servlet. The examples below correspond to the
|
||||
@ -231,6 +235,10 @@
|
||||
<url-pattern>/source</url-pattern>
|
||||
</servlet-mapping>
|
||||
|
||||
<servlet-mapping>
|
||||
<servlet-name>conf</servlet-name>
|
||||
<url-pattern>/conf</url-pattern>
|
||||
</servlet-mapping>
|
||||
|
||||
<!-- Define the default session timeout for your application,
|
||||
in minutes. From a servlet or JSP page, you can modify
|
||||
|
@ -174,6 +174,10 @@
|
||||
<servlet-class>org.owasp.webgoat.LessonSource</servlet-class>
|
||||
</servlet>
|
||||
|
||||
<servlet>
|
||||
<servlet-name>conf</servlet-name>
|
||||
<jsp-file>/lessons/ConfManagement/config.jsp</jsp-file>
|
||||
</servlet>
|
||||
<!-- Define mappings that are used by the servlet container to
|
||||
translate a particular request URI (context-relative) to a
|
||||
particular servlet. The examples below correspond to the
|
||||
@ -231,7 +235,11 @@
|
||||
<url-pattern>/source</url-pattern>
|
||||
</servlet-mapping>
|
||||
|
||||
|
||||
<servlet-mapping>
|
||||
<servlet-name>conf</servlet-name>
|
||||
<url-pattern>/conf</url-pattern>
|
||||
</servlet-mapping>
|
||||
|
||||
<!-- Define the default session timeout for your application,
|
||||
in minutes. From a servlet or JSP page, you can modify
|
||||
the timeout for a particular session dynamically by using
|
||||
@ -308,7 +316,7 @@
|
||||
<role-name>webgoat_user</role-name>
|
||||
</security-role>
|
||||
|
||||
<security-role>
|
||||
<security-role>
|
||||
<description>This role is for admins only</description>
|
||||
<role-name>server_admin</role-name>
|
||||
</security-role>
|
||||
|
@ -316,7 +316,7 @@
|
||||
<role-name>webgoat_user</role-name>
|
||||
</security-role>
|
||||
|
||||
<security-role>
|
||||
<security-role>
|
||||
<description>This role is for admins only</description>
|
||||
<role-name>server_admin</role-name>
|
||||
</security-role>
|
||||
|
Before Width: | Height: | Size: 1.6 KiB After Width: | Height: | Size: 1.6 KiB |
@ -74,7 +74,7 @@
|
||||
|
||||
<property name="app.name" value="WebGoat"/>
|
||||
<property name="app.path" value="/${app.name}"/>
|
||||
<property name="app.version" value="5.0-RC1"/> <!-- UPDATE THIS! -->
|
||||
<property name="app.version" value="5.0"/> <!-- UPDATE THIS! -->
|
||||
<property name="build.home" value="${basedir}/build"/>
|
||||
<property name="catalina.home" value="${basedir}/../tomcat"/> <!-- UPDATE THIS! -->
|
||||
<property name="dist.home" value="${basedir}/dist"/>
|
||||
|
Reference in New Issue
Block a user