From f79ad452d20b5a5fa8805a0b9c84777106979fcd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ren=C3=A9=20Zubcevic?= Date: Mon, 23 Dec 2019 14:01:39 +0100 Subject: [PATCH] password reset support for using www.webwolf.local --- .../src/test/java/org/owasp/webgoat/IntegrationTest.java | 1 - .../password_reset/ResetLinkAssignmentForgotPassword.java | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/webgoat-integration-tests/src/test/java/org/owasp/webgoat/IntegrationTest.java b/webgoat-integration-tests/src/test/java/org/owasp/webgoat/IntegrationTest.java index 128116aa5..0a73f7393 100644 --- a/webgoat-integration-tests/src/test/java/org/owasp/webgoat/IntegrationTest.java +++ b/webgoat-integration-tests/src/test/java/org/owasp/webgoat/IntegrationTest.java @@ -189,7 +189,6 @@ public abstract class IntegrationTest { .formParams(params) .post(url) .then() - .log().all() .statusCode(200) .extract().path("lessonCompleted"), CoreMatchers.is(expectedResult)); } diff --git a/webgoat-lessons/password-reset/src/main/java/org/owasp/webgoat/password_reset/ResetLinkAssignmentForgotPassword.java b/webgoat-lessons/password-reset/src/main/java/org/owasp/webgoat/password_reset/ResetLinkAssignmentForgotPassword.java index dcd7f8940..e299e9e89 100644 --- a/webgoat-lessons/password-reset/src/main/java/org/owasp/webgoat/password_reset/ResetLinkAssignmentForgotPassword.java +++ b/webgoat-lessons/password-reset/src/main/java/org/owasp/webgoat/password_reset/ResetLinkAssignmentForgotPassword.java @@ -61,7 +61,7 @@ public class ResetLinkAssignmentForgotPassword extends AssignmentEndpoint { ResetLinkAssignment.resetLinks.add(resetLink); String host = request.getHeader("host"); if (hasText(email)) { - if (email.equals(ResetLinkAssignment.TOM_EMAIL) && host.contains("9090")) { //User indeed changed the host header. + if (email.equals(ResetLinkAssignment.TOM_EMAIL) && (host.contains("9090")||host.contains("webwolf"))) { //User indeed changed the host header. ResetLinkAssignment.userToTomResetLink.put(getWebSession().getUserName(), resetLink); fakeClickingLinkEmail(host, resetLink); } else {