8050bd52c4
Navigation and links are not the same after reboot #194
2016-09-10 16:14:10 +02:00
b250af3564
Introduced stanalone project which allows us to pass arguments to the Tomcat instance (eg port, address)
2016-09-09 18:35:31 +02:00
a20532921a
How to create a Legacy Lesson - instruction edit #177
...
Commit to fix the following issues.
1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list.
2016-07-16 19:08:53 +02:00
2d39ab90d2
Doesn't run with tomcat8 #161
...
- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go.
2016-07-09 19:38:08 +02:00
bc30634f99
temporary restoration of isDefuseOSCommands
2016-07-06 13:33:35 -04:00
a8f8d4b4fa
Merge pull request #228 from span/developer-controls
...
Developer controls
2016-04-08 18:27:29 +02:00
263ce31db3
Merge pull request #224 from WebGoat/feature/137
...
Admin should also be able to see the solution, source and lesson plan.
2016-04-08 18:27:21 +02:00
407a5a810b
Merge pull request #220 from WebGoat/feature/169
...
Feature/169
2016-04-08 18:27:12 +02:00
e6fb74fa55
Implementation of developer controls to reload plugins and set label debugging from the GUI. Ref: webgoat/webgoat#93
2016-03-30 22:07:11 +02:00
b06d9ffd81
Admin should also be able to see the solution, source and lesson plan.
2016-03-29 01:24:07 +02:00
60192db921
Renamed everything to 'progress' instead of 'completed'
2016-03-28 08:37:18 +02:00
b4cc27c761
Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked.
...
Same as marking the lesson complete green checkbox
2016-03-27 17:46:06 +02:00
1815494681
Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user #179
...
- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project
2016-03-19 12:40:28 +01:00
7a7fb088ad
#173 Added the URL for WebGoat to the console output
2016-03-18 14:38:49 +01:00
25f08ea9b4
-- Remove raw type usage, add type check parameter.
...
-- Remove unused variable and unused imports.
2016-02-23 15:15:47 +02:00
daa05dd192
Seems locale should not depend of request's Accept-Language header.
...
Signed-off-by: Nanne Baars <nbaars@xebia.com >
2016-02-12 23:42:21 +01:00
dbb75980c9
Merge pull request #197 from span/htmlencoder
...
Fixes #195 by adding static initialisation of the maps
2016-02-12 13:02:41 -05:00
77c4a04d3d
Fixes #195 by adding static initialisation of the maps rather then using the constructor
2016-02-04 23:27:31 +01:00
59549e3b21
Add stage parameter in the session to keep track of current stage so that we do not reset the stage and recreate the database in the middle of a lesson. To do this a small refactor of WebSession was made which simply extracts some methods from the previously large update method. Ref #176 .
2016-02-04 23:21:12 +01:00
6320c2d22d
Fixining all the javadoc issues preventing the release
...
In order to perfom a Sonatype OSS release, all the javadocs must pe corretly and completely parsed in order to pass the release requirement.
This comment is only adding "comments' pertaining to javadoc. NO CODE HAS BEEN CHANGED
Signed-off-by: Doug Morato <dm@corp.io >
2016-01-31 23:14:50 -05:00
76fa797857
#167 removing refrences to github.io in code
2016-01-18 06:42:05 -05:00
07f0cea0a0
#165 cleaning up interim code
2016-01-14 09:03:43 -05:00
b3541231bc
#165 provide default and ability to override in lesson
2016-01-14 09:01:47 -05:00
e1be080eea
Forced browsing lesson does not show success #143
2016-01-06 18:47:59 +02:00
23a1f9e38e
Removed obsolete classes
2015-12-08 22:58:33 +01:00
5dfd1c44e9
Moving lesson utilities to common project instead of AbstractLesson
2015-12-03 22:52:11 +01:00
de71f2700e
Let user-composed (CSRF) attacks send one-request actions, as opposed to the address bar MVC links requesting lessons. The lesson display servlets have javascript that requests data and actions.
2015-11-07 05:43:31 -05:00
4a43a5572e
Unregister JDBC drivers, Fixes #134
...
Upon calling the maven tomcat7:shutdown goal, a severe error message was thrown because of not unloading the JDBC drivers.
Signed-off-by: Doug Morato <dm@corp.io >
2015-10-26 18:23:27 -04:00
789a57e792
SEVERE: The web application [/WebGoat] appears to have started a thread named [pool-7-thread-5] but has failed to stop it. This is very likely to create a memory leak #124
2015-10-26 21:38:30 +01:00
94ae466dbd
Cannot serialize session attribute #123
2015-10-26 07:52:26 +01:00
45db051f30
removing redundant line, adding hasPlan to special challenge case handling
2015-10-24 11:45:49 -05:00
d52dfe87c4
Merge remote-tracking branch 'upstream/master'
2015-10-24 09:12:02 -05:00
060b0cd8fa
Logging in sometimes goes to report card and misses category-menu #114
2015-10-23 06:54:14 +02:00
648bd3bb95
code cleanup
2015-10-22 16:55:18 -05:00
e1829e209c
Implemented lesson information which gives a mapping between the menu and the actual WebGoat-Lessons project.
2015-10-04 11:56:12 +02:00
a6a1b32939
Removed credits from lessons
2015-10-03 18:21:54 +02:00
487bc71df1
Moved the logic to the plugin loader which makes the context listener obsolete
2015-09-30 23:08:10 +02:00
6a00d66f8b
Plugins are now reloaded
2015-09-29 21:41:36 +02:00
33d251a147
Fixed goathills lesson with JSP now load correctly again(2)
2015-09-29 20:39:09 +02:00
d4450da5d7
Fixed goathills lesson with JSP now load correctly again
2015-09-28 23:27:58 +02:00
c0d727d1f2
Merge remote-tracking branch 'upstream/master'
2015-09-24 10:09:38 +02:00
86e4fd1c85
i8n highlighting #96
2015-09-24 10:09:07 +02:00
77f3c5135f
Merge pull request #101 from misfir3/master
...
#97 , updating controls for hints, source, solution and plans on lessons
2015-09-23 10:00:12 -04:00
1bd6a9e0e7
#97 , updating controls for hints, source, solution and plans on lessons in challenge roles
2015-09-23 09:01:45 -04:00
87d196c427
Return indication that plugins have been reloaded
2015-09-22 21:13:41 +02:00
6f8befd9a4
Merge remote-tracking branch 'upstream/master'
2015-09-22 20:40:02 +02:00
8d2771c108
Adding the ability to reload plugins directly from the interface instead of restarting Tomcat
2015-09-22 20:38:19 +02:00
dc57827cfc
#97 , Hint controls for CHALLENGE Category lessons
2015-09-21 21:24:10 -04:00
6e670c4ac5
#23 , #24 - LessonInfo Service now used for TitleView and HelpControlsView
2015-09-20 00:09:38 -04:00
901eff682f
Properties are appended when loading plugins ( #29 )
2015-09-19 08:07:54 +02:00
