5460133a7d 
					 
					
						
						
							
							Standalone should also run on the the WebGoat context root  
						
						
						
						
					 
					
						2016-09-11 20:50:12 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8050bd52c4 
					 
					
						
						
							
							Navigation and links are not the same after reboot  #194  
						
						
						
						
					 
					
						2016-09-10 16:14:10 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4133089d09 
					 
					
						
						
							
							Lessons should use POST  
						
						
						
						
					 
					
						2016-09-10 15:32:11 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2470be7387 
					 
					
						
						
							
							Copy lessons into plugin_lessons  #254  
						
						
						
						
					 
					
						2016-09-09 19:19:15 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						79320e7665 
					 
					
						
						
							
							Removing two lessons from the exclusion list.  
						
						
						
						
					 
					
						2016-09-09 18:35:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						07d0292820 
					 
					
						
						
							
							Changing README.md to integrate the new standalone possibility  
						
						
						
						
					 
					
						2016-09-09 18:35:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b250af3564 
					 
					
						
						
							
							Introduced stanalone project which allows us to pass arguments to the Tomcat instance (eg port, address)  
						
						
						
						
					 
					
						2016-09-09 18:35:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						56bad8e087 
					 
					
						
						
							
							Merge pull request  #252  from psiinon/patch-1  
						
						... 
						
						
						
						Added OWASP Labs badge 
						
						
					 
					
						2016-08-22 08:45:09 -04:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						cfca4df919 
					 
					
						
						
							
							Added OWASP Labs badge  
						
						
						
						
					 
					
						2016-08-15 11:41:51 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a20532921a 
					 
					
						
						
							
							How to create a Legacy Lesson - instruction edit  #177  
						
						... 
						
						
						
						Commit to fix the following issues.
1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list. 
						
						
					 
					
						2016-07-16 19:08:53 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2d39ab90d2 
					 
					
						
						
							
							Doesn't run with tomcat8  #161  
						
						... 
						
						
						
						- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go. 
						
						
					 
					
						2016-07-09 19:38:08 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						fc30ed9920 
					 
					
						
						
							
							part two of temp. isDefuseOSCOmmand for  #240  
						
						
						
						
					 
					
						2016-07-06 13:45:04 -04:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bc30634f99 
					 
					
						
						
							
							temporary restoration of isDefuseOSCommands  
						
						
						
						
					 
					
						2016-07-06 13:33:35 -04:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2e64a4cc05 
					 
					
						
						
							
							Merge pull request  #243  from span/java-requirement  
						
						... 
						
						
						
						Update java required version as stated in webgoat/webgoat#234  
						
						
					 
					
						2016-06-21 08:42:28 -04:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						51afbf6f84 
					 
					
						
						
							
							Update java required version as stated in  webgoat/webgoat#234  
						
						
						
						
					 
					
						2016-06-20 23:40:55 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						40c87b08af 
					 
					
						
						
							
							#240  Java Error Message in Lesson "How to Bypass a Path Based Access Control Scheme"  
						
						
						
						
					 
					
						2016-06-02 22:04:21 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						efce972209 
					 
					
						
						
							
							Merge pull request  #239  from dilshanraja/dev-temp  
						
						... 
						
						
						
						Updates to Dev Bootstrap 
						
						
					 
					
						2016-06-01 14:49:53 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4fc6a416dd 
					 
					
						
						
							
							Updates to Dev Bootstrap  
						
						... 
						
						
						
						- Use '-e' option in script echo commands to enable interpretation of escape sequences -> to make bash colours work
- README changed to show proper execution instruction 
						
						
					 
					
						2016-05-21 20:11:50 +10:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7f91671c8f 
					 
					
						
						
							
							Merge pull request  #229  from span/start-page-link  
						
						... 
						
						
						
						Fix broken start/home link on logo 
						
						
					 
					
						2016-04-08 18:27:37 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a8f8d4b4fa 
					 
					
						
						
							
							Merge pull request  #228  from span/developer-controls  
						
						... 
						
						
						
						Developer controls 
						
						
					 
					
						2016-04-08 18:27:29 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						263ce31db3 
					 
					
						
						
							
							Merge pull request  #224  from WebGoat/feature/137  
						
						... 
						
						
						
						Admin should also be able to see the solution, source and lesson plan. 
						
						
					 
					
						2016-04-08 18:27:21 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						407a5a810b 
					 
					
						
						
							
							Merge pull request  #220  from WebGoat/feature/169  
						
						... 
						
						
						
						Feature/169 
						
						
					 
					
						2016-04-08 18:27:12 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						46b24d72c9 
					 
					
						
						
							
							Merge pull request  #212  from nbaars/develop  
						
						... 
						
						
						
						Fixed  #184  
					
						2016-04-08 18:27:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0401779f58 
					 
					
						
						
							
							Fix broken test  
						
						
						
						
					 
					
						2016-03-31 23:06:16 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7758947711 
					 
					
						
						
							
							Load welcome.mvc instead of start.mvc when navigating home on the log,  fixes   #218  
						
						
						
						
					 
					
						2016-03-31 23:02:54 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						58ae7f3727 
					 
					
						
						
							
							Move loading of developer controls so they do not reload every time. Also reload current lesson after reloading labels. Ref  webgoat/webgoat#93 .  
						
						
						
						
					 
					
						2016-03-31 22:56:17 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2be4248ea3 
					 
					
						
						
							
							Add menu toggle to show/hide the controls. Ref  webgoat/webgoat#93  
						
						
						
						
					 
					
						2016-03-30 22:38:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e6fb74fa55 
					 
					
						
						
							
							Implementation of developer controls to reload plugins and set label debugging from the GUI. Ref:  webgoat/webgoat#93  
						
						
						
						
					 
					
						2016-03-30 22:07:11 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b06d9ffd81 
					 
					
						
						
							
							Admin should also be able to see the solution, source and lesson plan.  
						
						
						
						
					 
					
						2016-03-29 01:24:07 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a52df28ec6 
					 
					
						
						
							
							Merge pull request  #223  from WebGoat/features/221  
						
						... 
						
						
						
						Fixed the classnames in the wsdd config file (moved to different pack… 
						
						
					 
					
						2016-03-29 00:25:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						042a62624f 
					 
					
						
						
							
							Fixed the classnames in the wsdd config file (moved to different package)  
						
						
						
						
					 
					
						2016-03-29 00:17:01 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						015dcbde38 
					 
					
						
						
							
							Added image for Github developers documentation about lesson progress implementation.  
						
						
						
						
					 
					
						2016-03-28 08:38:25 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						60192db921 
					 
					
						
						
							
							Renamed everything to 'progress' instead of 'completed'  
						
						
						
						
					 
					
						2016-03-28 08:37:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						765b212032 
					 
					
						
						
							
							Merge pull request  #219  from muzir/patch-1  
						
						... 
						
						
						
						Update README.MD 
						
						
					 
					
						2016-03-27 17:46:51 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b4cc27c761 
					 
					
						
						
							
							Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked.  
						
						... 
						
						
						
						Same as marking the lesson complete green checkbox 
						
						
					 
					
						2016-03-27 17:46:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c11ecef099 
					 
					
						
						
							
							Update README.MD  
						
						... 
						
						
						
						grammar fix 
						
						
					 
					
						2016-03-25 10:28:07 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						35bd866873 
					 
					
						
						
							
							Merge pull request  #214  from span/restart-button  
						
						... 
						
						
						
						Fix  #213  by changing the id of the restart button to the correct id 
					
						2016-03-19 15:22:41 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						1815494681 
					 
					
						
						
							
							Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user  #179  
						
						... 
						
						
						
						- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project 
						
						
					 
					
						2016-03-19 12:40:28 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6c92f0629e 
					 
					
						
						
							
							Fix   #213  by changing the id of the restart button to the correct it  
						
						
						
						
					 
					
						2016-03-18 21:11:49 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7a7fb088ad 
					 
					
						
						
							
							#173  Added the URL for WebGoat to the console output  
						
						
						
						
					 
					
						2016-03-18 14:38:49 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bc6b040f42 
					 
					
						
						
							
							Injection Flaws | XPath Injection date file path issue  #184  
						
						... 
						
						
						
						- Enabled the lesson again because lesson has been fixed 
						
						
					 
					
						2016-03-18 13:39:18 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						50c4d9c170 
					 
					
						
						
							
							Removed duplicate entry  
						
						
						
						
					 
					
						2016-03-18 13:17:10 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8738bb2e46 
					 
					
						
						
							
							Merge pull request  #210  from nxadm/develop  
						
						... 
						
						
						
						Fix shebang 
						
						
					 
					
						2016-03-09 19:07:40 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						dc56ff9359 
					 
					
						
						
							
							Fix shebang  
						
						
						
						
					 
					
						2016-03-09 15:41:32 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5d393d1d65 
					 
					
						
						
							
							Merge pull request  #207  from span/weak-auth-cookie-enable  
						
						... 
						
						
						
						Enable weak authentication cookie lesson 
						
						
					 
					
						2016-02-25 22:07:46 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f5a5335e31 
					 
					
						
						
							
							Merge pull request  #205  from muzir/develop  
						
						... 
						
						
						
						-- Remove raw type usage, add type check parameter. 
						
						
					 
					
						2016-02-25 22:06:24 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a9a7c18592 
					 
					
						
						
							
							Enable weak authentication cookie lesson if  webgoat/webgoat#181  is not reproducible  
						
						
						
						
					 
					
						2016-02-24 15:23:03 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						01636eae10 
					 
					
						
						
							
							Merge pull request  #203  from span/readme-7.0.1  
						
						... 
						
						
						
						Update package references in readme 
						
						
					 
					
						2016-02-23 09:08:13 -05:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3d7eb40787 
					 
					
						
						
							
							Merge pull request  #202  from misfir3/develop  
						
						... 
						
						
						
						Develop 
						
						
					 
					
						2016-02-23 09:07:40 -05:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						25f08ea9b4 
					 
					
						
						
							
							-- Remove raw type usage, add type check parameter.  
						
						... 
						
						
						
						-- Remove unused variable and unused imports. 
						
						
					 
					
						2016-02-23 15:15:47 +02:00