Jason White
6fbd8457c1
update for width .. FF fix
2017-05-02 10:02:42 -04:00
Nanne Baars
a63bf006d6
Language of the browser not english will crash WebGoat during loading of the asciidoc. This is due to the fact we always presume the lesson plan is available in the browser language. It now falls back to 'en' whenever the lesson cannot be found with the language obtained from the browser.
2017-04-16 07:52:30 +02:00
Nanne Baars
243e6d5247
Fixing docker commands
2017-04-15 11:18:34 +02:00
Nanne Baars
8def26825b
#345 Lesson about Insecure Object References does not work - WebGoat 8.0
2017-04-09 06:53:14 +02:00
Nanne Baars
fbf2d1b422
Added validation to detect duplicate users during registration
2017-04-08 08:30:14 +02:00
Nanne Baars
dc245bd1e7
Updated README for building and starting WebGoat
2017-03-23 22:00:52 +01:00
Nanne Baars
f7c060ec81
Fixing Travis build
2017-03-23 21:54:02 +01:00
Nanne Baars
9833637abf
Fixed exception while logging in with unknown user
2017-03-23 21:46:21 +01:00
Nanne Baars
5156b05aac
Fixed logout
2017-03-23 21:03:20 +01:00
Nanne Baars
98000d6002
Fixing links in several lessons
2017-03-23 09:41:01 +01:00
Gerard de Leeuw
634a4c75b6
Fix path to javascript file
2017-03-31 12:11:14 +02:00
Gerard de Leeuw
e094dd6d14
Typo's
2017-03-31 12:06:45 +02:00
Nanne Baars
034bcf1305
Fixing Travis build
2017-03-22 20:53:10 +01:00
Nanne Baars
7f9af71c4c
Updating Docker files to reflect new naming of the server standalone jar
2017-03-22 17:43:46 +01:00
Nanne Baars
90eee0e2d8
Adding write_delay option to hsql database (otherwise users were not persisted in database correctly)
2017-03-22 17:04:44 +01:00
Nanne Baars
c14b172503
Removed default values from login screen
2017-03-22 15:53:50 +01:00
Nanne Baars
53d30e2274
Fixed saving lesson tracker with reloadable classloader
2017-03-22 15:51:57 +01:00
Nanne Baars
259fd19c1b
- Introduced user registration
...
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server
- Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson.
- Simplied loading of resources, by adding resource mappings in MvcConfig.
- Refactored plugin loading, now only one class is left for loading the lessons.
2017-03-22 11:35:14 +01:00
Nanne Baars
9b86aaba05
Adding challenge
2017-03-22 00:09:17 +01:00
hillstonenet-interns-bj
ad3e9439ec
[fix] SQLi Lessons 6a-b: lesson passed's boolean
2017-03-03 17:19:33 +01:00
hillstonenet-interns-bj
f5c3610aba
[fix] path in HttpProxies html file was wrong
2017-03-02 21:34:31 +01:00
Kristoffer Schneider
26ab0dc712
Added support to build an Docker container to run it on Raspberry Pi ( #329 )
...
Added support to build an Docker container to run it on Raspberry Pi #329
2017-03-02 21:31:40 +01:00
Nanne Baars
2b9185d85f
Merge pull request #328 from misfir3/develop
...
Moved paging to top of content
2017-03-02 21:31:04 +01:00
Nanne Baars
f71d02fc6a
Merge branch 'develop' into develop
2017-03-02 21:24:09 +01:00
Nanne Baars
2d6235e4f0
Provide Server-side service to support UI localization #265
...
- Now also enabled for adoc
2017-03-02 21:17:21 +01:00
Jason White
153dc57731
Basic solutions cheat file for now
2017-02-17 16:18:57 -05:00
Jason White
3193b591d8
commenting out latter part of XSS for now
2017-02-17 16:18:36 -05:00
Jason White
ac6e8b59b7
XSS updates
2017-02-17 15:59:38 -05:00
Jason White
d99a1d8448
temp. dep. mgmt resolution
2017-02-17 14:53:23 -05:00
Jason White
7f532f0ffc
XSS lesson updates
2017-02-17 13:05:54 -05:00
Jason White
af8f8c27a6
moving controls to top of content
2017-02-16 14:56:08 -05:00
Jason White
0763eac26b
Merge remote-tracking branch 'upstream/develop' into develop
2017-02-16 09:09:58 -05:00
Jason White
d8cc2de080
resolving conflicts merge
2017-02-16 09:08:19 -05:00
mayhew64
0de569339c
Cleanup of vulnerable components
2017-02-08 11:37:11 -05:00
mayhew64
27947cca96
Fixed the SQL Injection to return results upon success
2017-02-08 00:01:44 -05:00
mayhew64
33e807797c
Xstream RCE works now
2017-02-07 23:51:05 -05:00
Nanne Baars
65d728dfff
Solved issue with POST in vulnerable components lesson
2017-02-07 23:49:26 +01:00
Nanne Baars
8d3b028acc
Solved issue with POST in vulnerable components lesson
2017-02-07 23:38:57 +01:00
mayhew64
a00546638a
Merge branch 'develop' of https://github.com/WebGoat/WebGoat into develop
2017-02-07 16:06:45 -05:00
mayhew64
b4159385c1
Vulnerable components draft, fixed missing properties in httpbasics when user input was empty
2017-02-07 16:05:30 -05:00
Charles Truluck
92533b4fc1
Fixed grammatical error
2017-02-07 18:13:53 +01:00
Jason White
4664669ff2
cleaning up, fixing selected lesson class/es
2017-02-07 18:13:27 +01:00
Jason White
40844bd823
#319 updated content for proxy
2017-02-07 18:13:27 +01:00
mayhew64
85ef7ee1a4
Merge branch 'develop' of https://github.com/WebGoat/WebGoat into develop
2017-02-06 09:19:29 -05:00
Nanne Baars
ae82df3fb4
Fixed issue with loading messages in different language. As a standalone jar you can write properties back to messages.properties, this approach worked when you run with exploded classpath (target/classes etc). However failed when running inside Docker container.
2017-02-05 21:54:07 +01:00
Nanne Baars
d25700434e
Added tests for assignments
2017-01-31 23:28:59 +01:00
Jason White
f72f0dbddc
Merge branch 'develop' of github.com:misfir3/WebGoat into develop
2017-01-31 14:49:48 -05:00
Jason White
b4106919d0
cleaning up, fixing selected lesson class/es
2017-01-31 14:48:46 -05:00
Jason White
4d2edfa146
#319 updated content for proxy
2017-01-31 14:48:45 -05:00
Jason White
675c506683
cleaning up, fixing selected lesson class/es
2017-01-31 14:47:35 -05:00
