* feature/spring-boot: (92 commits)
XXE checkin
XXE checkin
XXE first attempt
HTTP-Basics mark lesson complete issue fixed
cleaning up some
fixing the scroll 'sliver' problem. Likely need to check back on this when menu grows again
lesson pagination fixes mainly, some other fixes included & clean up
Incremental style changes
refactor to help accomodate multiple attacks and output in one 'page'
Updated some of the credits
double-feedback fix on single page
commenting out to stop redundant callbacks
few cleanup items, added least privilege
Fixed test for password
First wave is complete; some rendering issues
Trying to wire up the DB connection and fill out first sql stub
Fixing hide/show of next/prev buttons
another stub
First round of sql injection with stubs
Give focus to username when loading the login page
...
Signed-off-by: Doug Morato <dm@corp.io>
# Conflicts:
# .travis.yml
# README.MD
# pom.xml
# webgoat-container/pom.xml
# webgoat-container/src/main/java/org/owasp/webgoat/HammerHead.java
# webgoat-container/src/main/java/org/owasp/webgoat/lessons/AbstractLesson.java
# webgoat-container/src/main/java/org/owasp/webgoat/lessons/LessonAdapter.java
# webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginsLoader.java
# webgoat-container/src/main/java/org/owasp/webgoat/service/RestartLessonService.java
# webgoat-container/src/main/java/org/owasp/webgoat/session/WebgoatContext.java
# webgoat-container/src/main/resources/static/js/goatApp/controller/LessonController.js
# webgoat-container/src/main/resources/webgoat.properties
# webgoat-container/src/main/webapp/META-INF/context.xml
# webgoat-container/src/main/webapp/WEB-INF/context.xml
# webgoat-container/src/main/webapp/js/goatApp/view/LessonContentView.js
# webgoat-container/src/test/java/org/owasp/webgoat/plugins/WebGoatIT.java
# webgoat-container/src/test/resources/log4j.properties
# webgoat_developer_bootstrap.sh
do not need to support anymore in 8.0:
- Introduced DI thoughout the code base
- Removed most superclasses of a lesson
- Hammerhead is now simplified to only one line of code
- Cleaned up WebSession
- Removed code which dealt with user roles, lesson fetching, username etc
- LessonTracker improvements
- Removed almost all code from the Screen class
- Removed ECS from the container project
- Removed adminstration pages, contained a lot of ECS codes which is much
simpler to just rewrite when necessary
Commit to fix the following issues.
1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list.
- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go.
