dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

password reset support for using www.webwolf.local

Browse Source
This commit is contained in:
René Zubcevic 2019-12-23 14:01:39 +01:00 committed by Nanne Baars
parent 59076fc9ef
commit f79ad452d2
2 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
webgoat-integration-tests/src/test/java/org/owasp/webgoat/IntegrationTest.java
View File

@ -189,7 +189,6 @@ public abstract class IntegrationTest {
.formParams(params) .formParams(params)
.post(url) .post(url)
.then() .then()
.log().all()
.statusCode(200) .statusCode(200)
.extract().path("lessonCompleted"), CoreMatchers.is(expectedResult)); .extract().path("lessonCompleted"), CoreMatchers.is(expectedResult));
} }

2
webgoat-lessons/password-reset/src/main/java/org/owasp/webgoat/password_reset/ResetLinkAssignmentForgotPassword.java
View File

@ -61,7 +61,7 @@ public class ResetLinkAssignmentForgotPassword extends AssignmentEndpoint {
ResetLinkAssignment.resetLinks.add(resetLink); ResetLinkAssignment.resetLinks.add(resetLink);
String host = request.getHeader("host"); String host = request.getHeader("host");
if (hasText(email)) { if (hasText(email)) {
if (email.equals(ResetLinkAssignment.TOM_EMAIL) && host.contains("9090")) { //User indeed changed the host header. if (email.equals(ResetLinkAssignment.TOM_EMAIL) && (host.contains("9090")||host.contains("webwolf"))) { //User indeed changed the host header.
ResetLinkAssignment.userToTomResetLink.put(getWebSession().getUserName(), resetLink); ResetLinkAssignment.userToTomResetLink.put(getWebSession().getUserName(), resetLink);
fakeClickingLinkEmail(host, resetLink); fakeClickingLinkEmail(host, resetLink);
} else { } else {