Commit Graph

3189 Commits

Author SHA1 Message Date
14621003d7 Remove banner.txt as you can set it with a property in application.properties 2021-03-31 19:31:13 +02:00
23f67b3d25 Remove unknown field which is set by reflection 2021-03-31 19:31:13 +02:00
1c6de07a54 Move integration test to JUnit 5 2021-03-31 19:31:13 +02:00
cda852f4e8 Run unit tests again for all lessons and rewrite all to JUnit 5
Due to the migration to Spring Boot 2.4 the Vintage dependency was no longer included by default, resulting in skipping all unit tests.
2021-03-31 19:31:13 +02:00
1d6a5ca01b Run unit tests again and rewrite all to JUnit 5
Due to the migration to Spring Boot 2.4 the Vintage dependency was no longer included by default, resulting in skipping all unit tests.
2021-03-31 19:31:13 +02:00
c574a6610b Make sure the release is behind approval 2021-03-31 19:31:13 +02:00
ae6d448aa0 Replace ${revision} with real version as Maven
The CI pipeline should take care of this.
2021-03-31 19:31:13 +02:00
b8bdb8f432 Updating to the new development version 2021-03-30 14:05:26 +00:00
3300c47c03 WIP vtest10 2021-03-30 16:03:57 +02:00
d077a76063 WIP vtest9 2021-03-30 16:02:06 +02:00
43d13dd1f9 WIP vtest8 2021-03-30 16:01:05 +02:00
072d99040f WIP vtest6 vtest7 2021-03-30 15:55:18 +02:00
4d5968da1a WIP vtest5 2021-03-30 15:54:04 +02:00
5a3843cf1f WIP vtest4 2021-03-30 12:36:48 +02:00
5fd0f03fd4 WIP vtest3 2021-03-30 11:12:41 +02:00
1cd115ace5 Bump actions/cache from v2 to v2.1.4
Bumps [actions/cache](https://github.com/actions/cache) from v2 to v2.1.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2...26968a09c0ea4f3e233fdddbafd1166051a095f6)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-29 12:12:05 +02:00
a9f8ff1090 Use 8.2.0 instead of v8.2.0 2021-03-29 09:30:51 +02:00
e114360a5f Fix SQL Injection 2021-03-29 08:28:36 +02:00
b16e60f691 Move OWASP dependency check to a Maven profile
This takes way too long to perform each time on a Github action as we cannot cache the image
2021-03-29 08:27:17 +02:00
f959e0387e Update Guava dep 2021-03-29 08:27:17 +02:00
425eb03a6e Remove docs dir and only keep the redirect to the OWASP website 2021-03-29 08:27:17 +02:00
8e312204ee Update to latest version and move the plugins out of the profile section.
Move the configuration files from parent dir to config dir
2021-03-29 08:27:17 +02:00
2e733f8594 Fix failing test on Windows
This was found because we migrated to Github actions which causes this test to fail because it uses "\n"
2021-03-29 07:43:07 +02:00
4e308d7880 Fix automatic rebase command 2021-03-29 07:30:03 +02:00
935871c39a Add some debugging information to know which test cases might have failed 2021-03-29 07:30:03 +02:00
ce6e4d2090 Fix issue with looking for all directories one present should be enough 2021-03-29 07:30:03 +02:00
68a53bc5dc Fix failing test Windows it fails with a much lower number 2021-03-29 07:30:03 +02:00
459d9ad74c Move away from Travis to Github actions 2021-03-29 07:30:03 +02:00
e40a26f193 Improve token handling 2021-03-15 17:48:13 +01:00
59e04dee6e Fix typo 2021-03-15 17:48:13 +01:00
5a16ea514a Fix quiz 2021-03-15 17:48:13 +01:00
8d2d82764f Assignment 8 loads JWT key again 2021-03-15 17:48:13 +01:00
dedb2f9fef Open new tab when clicking on JWT link for WebWolf 2021-03-15 17:48:13 +01:00
8b89667d9d Fix quiz, first should be second 2021-03-15 17:48:13 +01:00
d4da2d0efa Convert lesson into using DB instead of using regular expression to check the solution 2021-03-15 17:48:13 +01:00
c798e4be32 Fix JWT integration tests 2021-03-15 17:48:13 +01:00
1ebd50cb5b WIP 2021-03-15 17:48:13 +01:00
f2ab5c1968 Update JWT lesson 2021-03-15 17:48:13 +01:00
ead1d6fffb Bootstrap requires jQuery 2021-03-15 17:48:13 +01:00
9b81cb44fa Bootstrap loads now, otherwise dropdown etc does not work 2021-03-15 17:48:13 +01:00
142631c7a0 WIP 2021-03-15 17:48:13 +01:00
e78549fb72 Add JWT encoder to WebWolf 2021-03-15 17:48:13 +01:00
431da30946 Selenium test added (#906)
* add a selenium test for firefox

* add geckodriver and firefox to travis

* install updated

* install updated

* try out suggested webdriver dependency class

* add more resilience
2021-02-21 19:57:08 +01:00
ad5ab4ca2e Fixes #321 (#935)
Copyright year was "20014", replaced to "2014"
Fixed the old github.io URL which no longer exist
See https://github.com/WebGoat/WebGoat/issues/321
2021-02-18 19:06:11 +01:00
522f6b5fff Fixed a typo (#936)
Fixed a typo in the documentation and added a colon for better readability
2021-02-18 19:04:00 +01:00
c6789d7ce3 Update Apache Maven from 3.2.1 to 3.2.5 (#932)
The version of Maven is not compatible with the plugin "org.codehaus.mojo:flatten-maven-plugin:1.2.5" used in webgoat-container
```
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Using 'UTF-8' encoding to copy filtered properties files.
[INFO] Copying 1 resource
[INFO] Copying 111 resources
[INFO] The encoding used to copy filtered properties files have not been set. This means that the same encoding will be used to copy filtered properties files as when copying other filtered resources. This might not be what you want! Run your build with --debug to see which files might be affected. Read more at https://maven.apache.org/plugins/maven-resources-plugin/examples/filtering-properties-files.html
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO] 
[INFO] webgoat-container ................................. FAILURE [ 18.319 s]
...
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 26.001 s
[INFO] Finished at: 2021-02-06T09:37:58+00:00
[INFO] Final Memory: 49M/162M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.codehaus.mojo:flatten-maven-plugin:1.2.5:flatten (flatten) on project webgoat-container: The plugin org.codehaus.mojo:flatten-maven-plugin:1.2.5 requires Maven version 3.2.5 -> [Help 1]
```
2021-02-11 15:14:50 +01:00
215b3b4e78 Remove redundant escaping in regex (#929) 2021-02-11 15:13:38 +01:00
00c4be63f0 Fix sql injection line comments issue. (#925) 2021-01-19 10:47:04 +01:00
2e581d6bdb docs: update SQLi lesson text (#928)
- corrected typos/grammar issues
  - restructured sentences for clarity
2021-01-19 10:29:16 +01:00
b20f6492a3 Simplify regex (#927) 2021-01-15 14:36:04 +01:00