dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[fix] path in HttpProxies html file was wrong

Browse Source
This commit is contained in:
hillstonenet-interns-bj 2017-02-22 14:11:21 +08:00 committed by Nanne Baars
parent 26ab0dc712
commit f5c3610aba
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
webgoat-lessons/http-proxies/src/main/java/org/owasp/webgoat/plugin/HttpBasicsInterceptRequest.java
View File

@ -49,7 +49,12 @@ public class HttpBasicsInterceptRequest extends AssignmentEndpoint {
@RequestMapping(method = RequestMethod.GET) @RequestMapping(method = RequestMethod.GET)
public @ResponseBody public @ResponseBody
AttackResult completed(HttpServletRequest request) throws IOException { AttackResult completed(HttpServletRequest request) throws IOException {
if (request.getHeader("x-request-intercepted").toLowerCase().equals("true") && request.getParameter("changeMe").equals("Requests are tampered easily")) { String header = null;
String param = null;
if (request != null && (header = request.getHeader("x-request-intercepted")) != null
&& header.toLowerCase().equals("true")
&& (param = request.getParameter("changeMe")) != null
&& param.equals("Requests are tampered easily")) {
return trackProgress(success().feedback("http-proxies.intercept.success").build()); return trackProgress(success().feedback("http-proxies.intercept.success").build());
} else { } else {
return trackProgress(failed().feedback("http-proxies.intercept.failure").build()); return trackProgress(failed().feedback("http-proxies.intercept.failure").build());

2
webgoat-lessons/http-proxies/src/main/resources/plugin/HttpProxies/html/HttpProxies.html
View File

@ -37,7 +37,7 @@
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div> <div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
<form class="attack-form" accept-charset="UNKNOWN" name="intercept-request" <form class="attack-form" accept-charset="UNKNOWN" name="intercept-request"
method="POST" method="POST"
action="/WebGoat/HttpBasics/intercept-request" action="/WebGoat/HttpProxies/intercept-request"
enctype="application/json;charset=UTF-8"> enctype="application/json;charset=UTF-8">
<input type="text" value="doesn't matter really" name="changeMe" /> <input type="text" value="doesn't matter really" name="changeMe" />