Commit Graph

567 Commits

Author SHA1 Message Date
0a26e05ca5 for the menu part 2016-06-29 11:40:18 +02:00
1761868cec Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot 2016-06-29 10:45:58 +02:00
a8ac2d7a0c moving attack form to modal/overlay ... initial cut 2016-06-29 10:39:54 +02:00
f12c06fc55 Reading yml file based lesson configuration 2016-06-29 07:14:39 +02:00
f203f38702 Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot 2016-06-28 17:04:12 +02:00
501ec1f9e0 Turning off caching in spring boot for dev purposes 2016-06-28 16:22:50 +02:00
3f37b06d1f initial support for separation of content from attack in UI 2016-06-28 16:21:14 +02:00
0aa94a71e5 initial support for separation of content from attack in UI 2016-06-28 16:20:40 +02:00
966e5b9e0a Added Docker support. 2016-06-28 07:46:34 +02:00
374ae376e3 clean up 2016-06-02 21:59:08 +02:00
63398aaf6d Thymeleaf works with AsciiDoc 2016-05-15 10:38:22 +02:00
e8628599fe Thymeleaf resolver does not need WebSession anymore 2016-05-13 15:57:52 +02:00
22d2255664 Made lesson resolution with Thymeleaf dynamic 2016-05-13 15:42:48 +02:00
4a19ddf40a Endpoints provided by lessons now work 2016-05-13 14:45:53 +02:00
79102c6ddd Lessons which load JavaScript etc now works 2016-04-26 18:59:51 +02:00
9066e45725 Updating README and moving webapp dir to old 2016-04-10 21:22:20 +02:00
289da771c9 Login and logout works together with context root 2016-04-10 14:56:27 +02:00
d0acfc00c0 Menu options about version, user info work again. 2016-04-09 22:08:40 +02:00
576333af7c Merging changes from Daniel back into the Spring Boot structure
- different js location
  - Fixed label debugging which kept on reloading and reloading the lesson
  - Changes from .jsp merged into .html
2016-04-09 15:40:53 +02:00
a8ea4a16e6 Images from solutions are loading again 2016-04-09 14:09:34 +02:00
8ff02cab6d Fully working WebGoat after migrating to Spring Boot. 2016-04-09 14:09:29 +02:00
ecc8cb391b First attempt to remove JSP and move to Thymeleaf and update to Spring Boot. The Thymeleaf templates can be loaded as snippets which makes it more easy to move away from ECS and create normal HTML pages for a lesson. 2016-04-09 14:06:03 +02:00
7f91671c8f Merge pull request #229 from span/start-page-link
Fix broken start/home link on logo
2016-04-08 18:27:37 +02:00
a8f8d4b4fa Merge pull request #228 from span/developer-controls
Developer controls
2016-04-08 18:27:29 +02:00
263ce31db3 Merge pull request #224 from WebGoat/feature/137
Admin should also be able to see the solution, source and lesson plan.
2016-04-08 18:27:21 +02:00
407a5a810b Merge pull request #220 from WebGoat/feature/169
Feature/169
2016-04-08 18:27:12 +02:00
46b24d72c9 Merge pull request #212 from nbaars/develop
Fixed #184
2016-04-08 18:27:00 +02:00
0401779f58 Fix broken test 2016-03-31 23:06:16 +02:00
7758947711 Load welcome.mvc instead of start.mvc when navigating home on the log, fixes #218 2016-03-31 23:02:54 +02:00
58ae7f3727 Move loading of developer controls so they do not reload every time. Also reload current lesson after reloading labels. Ref webgoat/webgoat#93. 2016-03-31 22:56:17 +02:00
2be4248ea3 Add menu toggle to show/hide the controls. Ref webgoat/webgoat#93 2016-03-30 22:38:18 +02:00
e6fb74fa55 Implementation of developer controls to reload plugins and set label debugging from the GUI. Ref: webgoat/webgoat#93 2016-03-30 22:07:11 +02:00
b06d9ffd81 Admin should also be able to see the solution, source and lesson plan. 2016-03-29 01:24:07 +02:00
042a62624f Fixed the classnames in the wsdd config file (moved to different package) 2016-03-29 00:17:01 +02:00
015dcbde38 Added image for Github developers documentation about lesson progress implementation. 2016-03-28 08:38:25 +02:00
60192db921 Renamed everything to 'progress' instead of 'completed' 2016-03-28 08:37:18 +02:00
b4cc27c761 Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked.
Same as marking the lesson complete green checkbox
2016-03-27 17:46:06 +02:00
1815494681 Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user #179
- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project
2016-03-19 12:40:28 +01:00
6c92f0629e Fix #213 by changing the id of the restart button to the correct it 2016-03-18 21:11:49 +01:00
7a7fb088ad #173 Added the URL for WebGoat to the console output 2016-03-18 14:38:49 +01:00
bc6b040f42 Injection Flaws | XPath Injection date file path issue #184
- Enabled the lesson again because lesson has been fixed
2016-03-18 13:39:18 +01:00
50c4d9c170 Removed duplicate entry 2016-03-18 13:17:10 +01:00
5d393d1d65 Merge pull request #207 from span/weak-auth-cookie-enable
Enable weak authentication cookie lesson
2016-02-25 22:07:46 +01:00
f5a5335e31 Merge pull request #205 from muzir/develop
-- Remove raw type usage, add type check parameter.
2016-02-25 22:06:24 +01:00
a9a7c18592 Enable weak authentication cookie lesson if webgoat/webgoat#181 is not reproducible 2016-02-24 15:23:03 +01:00
25f08ea9b4 -- Remove raw type usage, add type check parameter.
-- Remove unused variable and unused imports.
2016-02-23 15:15:47 +02:00
575c940655 #180, clean up 2016-02-18 21:26:32 -05:00
7c65441c8e #180, better management of show* buttons 2016-02-18 19:44:12 -05:00
daa05dd192 Seems locale should not depend of request's Accept-Language header.
Signed-off-by: Nanne Baars <nbaars@xebia.com>
2016-02-12 23:42:21 +01:00
dbb75980c9 Merge pull request #197 from span/htmlencoder
Fixes #195 by adding static initialisation of the maps
2016-02-12 13:02:41 -05:00