1033df4d15 
					 
					
						
						
							
							Added Vagrant for users and developers  
						
						
						
						
					 
					
						2016-09-23 20:45:46 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5d69467c6f 
					 
					
						
						
							
							Added testcase for RoleBasedAccessControl  
						
						
						
						
					 
					
						2016-09-22 17:46:13 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a0f1bc16ce 
					 
					
						
						
							
							Removed Edge browser from integration testing  
						
						
						
						
					 
					
						2016-09-22 07:47:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bc0fb38b4d 
					 
					
						
						
							
							Removed logging while running testcases  
						
						
						
						
					 
					
						2016-09-19 23:56:50 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c7a03abdc3 
					 
					
						
						
							
							Fixing the functional testcases together with Travis CI which stopped due to excessive logging from the Tomcat 7 Maven plugin  
						
						
						
						
					 
					
						2016-09-19 23:42:21 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0687b088b6 
					 
					
						
						
							
							Fixing the functional testcases together with Travis CI which stopped due to excessive logging from the Tomcat 7 Maven plugin  
						
						
						
						
					 
					
						2016-09-19 23:08:44 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6919b15013 
					 
					
						
						
							
							Fix failing testcases  
						
						
						
						
					 
					
						2016-09-17 22:37:20 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e084816b8b 
					 
					
						
						
							
							Fixing failing testcase and enabling all browsers again  
						
						
						
						
					 
					
						2016-09-17 21:43:10 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						131413e11b 
					 
					
						
						
							
							Fixed testcase failed open authentication scheme  
						
						
						
						
					 
					
						2016-09-17 21:37:11 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7ee7e9e683 
					 
					
						
						
							
							Added testcase for JavaScript validation  
						
						
						
						
					 
					
						2016-09-17 21:08:50 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						9b634a47c6 
					 
					
						
						
							
							Added testcase for client side validation  
						
						
						
						
					 
					
						2016-09-17 14:56:29 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a1375b6718 
					 
					
						
						
							
							Fixed failing testcase  
						
						
						
						
					 
					
						2016-09-15 23:17:05 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5e797db3ec 
					 
					
						
						
							
							Fixing compile error  
						
						
						
						
					 
					
						2016-09-15 23:02:25 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0225a7c501 
					 
					
						
						
							
							Merge pull request  #256  from RubieV/patch-1  
						
						... 
						
						
						
						Code cleanup using @Test(expected = Exception) 
						
						
					 
					
						2016-09-15 20:49:24 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c6ce0da44c 
					 
					
						
						
							
							Remove Exception from method signature  
						
						... 
						
						
						
						Removed null checking in favor of boolean which is explicitly value based. 
						
						
					 
					
						2016-09-14 22:06:43 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						db5e418cbf 
					 
					
						
						
							
							Indicate exception thrown  
						
						
						
						
					 
					
						2016-09-14 22:00:35 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						fd010782eb 
					 
					
						
						
							
							Fix missing .class  
						
						
						
						
					 
					
						2016-09-14 21:42:36 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						22688622fd 
					 
					
						
						
							
							Code cleanup using @Test(expected = Exception)  
						
						... 
						
						
						
						Code edited in the browser, please run tests ;) 
						
						
					 
					
						2016-09-14 21:35:52 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b63f2ae44e 
					 
					
						
						
							
							Removed isDefuseOsCommands (no longer necessary)  
						
						
						
						
					 
					
						2016-09-12 21:54:40 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2027a0ae7d 
					 
					
						
						
							
							Added testcases for lesson plan / solutions for lesson with stages.  
						
						
						
						
					 
					
						2016-09-12 21:54:05 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7fa63cec81 
					 
					
						
						
							
							- Improved the 'ajax form' it now uses the form method to create the ajax call (thanks to Felipe De Boni for suggesting this fix)  
						
						
						
						
					 
					
						2016-09-12 21:37:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8e9bebacd7 
					 
					
						
						
							
							- Added more testcases since now we have static IDs for the lessons.  
						
						... 
						
						
						
						- Changed the RestartLessonService because returning the text/html triggered the browser to show a popup which made the Selenium tests fail. 
						
						
					 
					
						2016-09-11 20:51:38 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8050bd52c4 
					 
					
						
						
							
							Navigation and links are not the same after reboot  #194  
						
						
						
						
					 
					
						2016-09-10 16:14:10 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4133089d09 
					 
					
						
						
							
							Lessons should use POST  
						
						
						
						
					 
					
						2016-09-10 15:32:11 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						79320e7665 
					 
					
						
						
							
							Removing two lessons from the exclusion list.  
						
						
						
						
					 
					
						2016-09-09 18:35:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b250af3564 
					 
					
						
						
							
							Introduced stanalone project which allows us to pass arguments to the Tomcat instance (eg port, address)  
						
						
						
						
					 
					
						2016-09-09 18:35:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a20532921a 
					 
					
						
						
							
							How to create a Legacy Lesson - instruction edit  #177  
						
						... 
						
						
						
						Commit to fix the following issues.
1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list. 
						
						
					 
					
						2016-07-16 19:08:53 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2d39ab90d2 
					 
					
						
						
							
							Doesn't run with tomcat8  #161  
						
						... 
						
						
						
						- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go. 
						
						
					 
					
						2016-07-09 19:38:08 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						fc30ed9920 
					 
					
						
						
							
							part two of temp. isDefuseOSCOmmand for  #240  
						
						
						
						
					 
					
						2016-07-06 13:45:04 -04:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bc30634f99 
					 
					
						
						
							
							temporary restoration of isDefuseOSCommands  
						
						
						
						
					 
					
						2016-07-06 13:33:35 -04:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7f91671c8f 
					 
					
						
						
							
							Merge pull request  #229  from span/start-page-link  
						
						... 
						
						
						
						Fix broken start/home link on logo 
						
						
					 
					
						2016-04-08 18:27:37 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a8f8d4b4fa 
					 
					
						
						
							
							Merge pull request  #228  from span/developer-controls  
						
						... 
						
						
						
						Developer controls 
						
						
					 
					
						2016-04-08 18:27:29 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						263ce31db3 
					 
					
						
						
							
							Merge pull request  #224  from WebGoat/feature/137  
						
						... 
						
						
						
						Admin should also be able to see the solution, source and lesson plan. 
						
						
					 
					
						2016-04-08 18:27:21 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						407a5a810b 
					 
					
						
						
							
							Merge pull request  #220  from WebGoat/feature/169  
						
						... 
						
						
						
						Feature/169 
						
						
					 
					
						2016-04-08 18:27:12 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						46b24d72c9 
					 
					
						
						
							
							Merge pull request  #212  from nbaars/develop  
						
						... 
						
						
						
						Fixed  #184  
					
						2016-04-08 18:27:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0401779f58 
					 
					
						
						
							
							Fix broken test  
						
						
						
						
					 
					
						2016-03-31 23:06:16 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7758947711 
					 
					
						
						
							
							Load welcome.mvc instead of start.mvc when navigating home on the log,  fixes   #218  
						
						
						
						
					 
					
						2016-03-31 23:02:54 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						58ae7f3727 
					 
					
						
						
							
							Move loading of developer controls so they do not reload every time. Also reload current lesson after reloading labels. Ref  webgoat/webgoat#93 .  
						
						
						
						
					 
					
						2016-03-31 22:56:17 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2be4248ea3 
					 
					
						
						
							
							Add menu toggle to show/hide the controls. Ref  webgoat/webgoat#93  
						
						
						
						
					 
					
						2016-03-30 22:38:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e6fb74fa55 
					 
					
						
						
							
							Implementation of developer controls to reload plugins and set label debugging from the GUI. Ref:  webgoat/webgoat#93  
						
						
						
						
					 
					
						2016-03-30 22:07:11 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b06d9ffd81 
					 
					
						
						
							
							Admin should also be able to see the solution, source and lesson plan.  
						
						
						
						
					 
					
						2016-03-29 01:24:07 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						042a62624f 
					 
					
						
						
							
							Fixed the classnames in the wsdd config file (moved to different package)  
						
						
						
						
					 
					
						2016-03-29 00:17:01 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						015dcbde38 
					 
					
						
						
							
							Added image for Github developers documentation about lesson progress implementation.  
						
						
						
						
					 
					
						2016-03-28 08:38:25 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						60192db921 
					 
					
						
						
							
							Renamed everything to 'progress' instead of 'completed'  
						
						
						
						
					 
					
						2016-03-28 08:37:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b4cc27c761 
					 
					
						
						
							
							Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked.  
						
						... 
						
						
						
						Same as marking the lesson complete green checkbox 
						
						
					 
					
						2016-03-27 17:46:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						1815494681 
					 
					
						
						
							
							Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user  #179  
						
						... 
						
						
						
						- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project 
						
						
					 
					
						2016-03-19 12:40:28 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6c92f0629e 
					 
					
						
						
							
							Fix   #213  by changing the id of the restart button to the correct it  
						
						
						
						
					 
					
						2016-03-18 21:11:49 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7a7fb088ad 
					 
					
						
						
							
							#173  Added the URL for WebGoat to the console output  
						
						
						
						
					 
					
						2016-03-18 14:38:49 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bc6b040f42 
					 
					
						
						
							
							Injection Flaws | XPath Injection date file path issue  #184  
						
						... 
						
						
						
						- Enabled the lesson again because lesson has been fixed 
						
						
					 
					
						2016-03-18 13:39:18 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						50c4d9c170 
					 
					
						
						
							
							Removed duplicate entry  
						
						
						
						
					 
					
						2016-03-18 13:17:10 +01:00