diff --git a/README.md b/README.md index 60cd410f5..44f30e7e5 100644 --- a/README.md +++ b/README.md @@ -62,7 +62,7 @@ This way, you can start where you left off. If you remove the container, you nee Download the latest WebGoat release from [https://github.com/WebGoat/WebGoat/releases](https://github.com/WebGoat/WebGoat/releases) ```shell -java -Dfile.encoding=UTF-8 -Dwebgoat.port=8080 -Dwebwolf.port=9090 -jar webgoat-8.2.3.jar +java -Dfile.encoding=UTF-8 -Dwebgoat.port=8080 -Dwebwolf.port=9090 -jar webgoat-2023.0.jar ``` Click the link in the log to start WebGoat. @@ -125,7 +125,7 @@ For instance running as a jar on a Linux/macOS it will look like this: ```Shell export EXCLUDE_CATEGORIES="CLIENT_SIDE,GENERAL,CHALLENGE" export EXCLUDE_LESSONS="SqlInjectionAdvanced,SqlInjectionMitigations" -java -jar target/webgoat-8.2.3-SNAPSHOT.jar +java -jar target/webgoat-2023.0-SNAPSHOT.jar ``` Or in a docker run it would (once this version is pushed into docker hub) look like this: diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 0e217e36e..b0da20ea7 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,10 +1,15 @@ # WebGoat release notes -## Unreleased +## Version 2023.0 + +With great pleasure, we present you with a new release of WebGoat **2023.0**. Finally, it has been a while. This year starts with a new release of WebGoat. This year we will undoubtedly release more often. From this release on, we began to use a new versioning scheme (https://calver.org/#scheme). + +A big thanks to René Zubcevic and Àngel Ollé Blázquez for keeping the project alive this last year, and hopefully, we can make +many more releases this year. ### New functionality -- New year's resolution: major refactoring of WebGoat to simplify the setup and improve building times. +- New year's resolution(2022): major refactoring of WebGoat to simplify the setup and improve building times. - Move away from multi-project setup: * This has a huge performance benefit when building the application. Build time locally is now `Total time: 42.469 s` (depends on your local machine of course) * No longer add Maven dependencies in several places @@ -22,14 +27,27 @@ - Updated introduction lesson to WebWolf. - Added language switch for support for multiple languages. - Removed logic to start WebGoat on a random port when port `8080` is taken. We would loop until we found a free port. We simplified this to just start on the specified port. +- Add Google formatter for all our code, a PR now checks whether the code adheres to the standard. +- Renaming of all packages and folders. - [#1039 New OWASP Top 10](https://github.com/WebGoat/WebGoat/issues/1093) +- [#1065 New lesson about logging](https://github.com/WebGoat/WebGoat/issues/1065) + +### Bug fixes + + - [#1193 Vulnerable component lesson - java.desktop does not "opens java.beans" to unnamed module](https://github.com/WebGoat/WebGoat/issues/1193) - [#1176 Minor: XXE lesson 12 patch not reset by 'lesson reset' while it IS reset by leaving/returning to lesson](https://github.com/WebGoat/WebGoat/issues/1176) - [#1134 "Exploiting XStream" assignment does not work](https://github.com/WebGoat/WebGoat/issues/1134) - [#1130 Typo: Using Indrect References](https://github.com/WebGoat/WebGoat/issues/1130) - [#1101 SQL lesson not correct](https://github.com/WebGoat/WebGoat/issues/1101) - [#1079 startup.sh issues of WebWolf - cannot connect to the WebGoat DB](https://github.com/WebGoat/WebGoat/issues/1079) -- [#1065 New lesson about logging](https://github.com/WebGoat/WebGoat/issues/1065) +- [#1379 Move XXE to A05:2021-_Security_ Misconfiguration](https://github.com/WebGoat/WebGoat/issues/1379) +- [#1298 SocketUtils is deprecated and will be removed in Spring Security 6](https://github.com/WebGoat/WebGoat/issues/1298) +- [#1248 Rewrite the WebWolf Introduction Lesson with the new changes](https://github.com/WebGoat/WebGoat/issues/1248) +- [#1200 Type cast error in sample code at JWT token section](https://github.com/WebGoat/WebGoat/issues/1200) +- [#1173 --server.port=9000 is not respected on Windows (both cmd as Powershell)](https://github.com/WebGoat/WebGoat/issues/1173) +- [#1103 (A1) path traversel lesson 7 seems broken](https://github.com/WebGoat/WebGoat/issues/1103) +- [#986 - User registration not persistant](https://github.com/WebGoat/WebGoat/issues/986) ## Version 8.2.2 diff --git a/pom.xml b/pom.xml index 21dcfc4c7..4e2ab4ccd 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ org.owasp.webgoat webgoat - 8.2.3-SNAPSHOT + 2023.0 jar WebGoat