2699a67c8a
wip
2016-10-11 15:48:26 -04:00
d9e7ab724d
disabling csrf
2016-10-11 11:41:48 -04:00
7d2f1f0a3a
temp fix
2016-10-11 09:20:39 -04:00
c6ce0da44c
Remove Exception from method signature
...
Removed null checking in favor of boolean which is explicitly value based.
2016-09-14 22:06:43 +02:00
b63f2ae44e
Removed isDefuseOsCommands (no longer necessary)
2016-09-12 21:54:40 +02:00
8e9bebacd7
- Added more testcases since now we have static IDs for the lessons.
...
- Changed the RestartLessonService because returning the text/html triggered the browser to show a popup which made the Selenium tests fail.
2016-09-11 20:51:38 +02:00
8050bd52c4
Navigation and links are not the same after reboot #194
2016-09-10 16:14:10 +02:00
b250af3564
Introduced stanalone project which allows us to pass arguments to the Tomcat instance (eg port, address)
2016-09-09 18:35:31 +02:00
61d5116d44
Intermediate result for calling multiple lesson endpoints
2016-08-18 21:15:12 +02:00
c0ab7b7d1c
Getting the attack verification to work
2016-08-08 19:38:24 +02:00
e3c488c624
reverting local test that was committed
2016-07-26 17:12:37 -04:00
c5535603dc
committing for local test purposes unrelated to webgoat
2016-07-26 17:09:29 -04:00
a20532921a
How to create a Legacy Lesson - instruction edit #177
...
Commit to fix the following issues.
1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list.
2016-07-16 19:08:53 +02:00
2d39ab90d2
Doesn't run with tomcat8 #161
...
- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go.
2016-07-09 19:38:08 +02:00
bc30634f99
temporary restoration of isDefuseOSCommands
2016-07-06 13:33:35 -04:00
8e862ba9c3
changing to 'id' for linking in YmlBasedLesson
2016-07-05 08:22:37 -04:00
c350e86772
YML config should override lesson class
2016-06-29 12:08:13 +02:00
0a26e05ca5
for the menu part
2016-06-29 11:40:18 +02:00
1761868cec
Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot
2016-06-29 10:45:58 +02:00
f12c06fc55
Reading yml file based lesson configuration
2016-06-29 07:14:39 +02:00
f203f38702
Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot
2016-06-28 17:04:12 +02:00
501ec1f9e0
Turning off caching in spring boot for dev purposes
2016-06-28 16:22:50 +02:00
966e5b9e0a
Added Docker support.
2016-06-28 07:46:34 +02:00
374ae376e3
clean up
2016-06-02 21:59:08 +02:00
63398aaf6d
Thymeleaf works with AsciiDoc
2016-05-15 10:38:22 +02:00
e8628599fe
Thymeleaf resolver does not need WebSession anymore
2016-05-13 15:57:52 +02:00
22d2255664
Made lesson resolution with Thymeleaf dynamic
2016-05-13 15:42:48 +02:00
4a19ddf40a
Endpoints provided by lessons now work
2016-05-13 14:45:53 +02:00
79102c6ddd
Lessons which load JavaScript etc now works
2016-04-26 18:59:51 +02:00
9066e45725
Updating README and moving webapp dir to old
2016-04-10 21:22:20 +02:00
289da771c9
Login and logout works together with context root
2016-04-10 14:56:27 +02:00
d0acfc00c0
Menu options about version, user info work again.
2016-04-09 22:08:40 +02:00
576333af7c
Merging changes from Daniel back into the Spring Boot structure
...
- different js location
- Fixed label debugging which kept on reloading and reloading the lesson
- Changes from .jsp merged into .html
2016-04-09 15:40:53 +02:00
a8ea4a16e6
Images from solutions are loading again
2016-04-09 14:09:34 +02:00
8ff02cab6d
Fully working WebGoat after migrating to Spring Boot.
2016-04-09 14:09:29 +02:00
ecc8cb391b
First attempt to remove JSP and move to Thymeleaf and update to Spring Boot. The Thymeleaf templates can be loaded as snippets which makes it more easy to move away from ECS and create normal HTML pages for a lesson.
2016-04-09 14:06:03 +02:00
a8f8d4b4fa
Merge pull request #228 from span/developer-controls
...
Developer controls
2016-04-08 18:27:29 +02:00
263ce31db3
Merge pull request #224 from WebGoat/feature/137
...
Admin should also be able to see the solution, source and lesson plan.
2016-04-08 18:27:21 +02:00
407a5a810b
Merge pull request #220 from WebGoat/feature/169
...
Feature/169
2016-04-08 18:27:12 +02:00
e6fb74fa55
Implementation of developer controls to reload plugins and set label debugging from the GUI. Ref: webgoat/webgoat#93
2016-03-30 22:07:11 +02:00
b06d9ffd81
Admin should also be able to see the solution, source and lesson plan.
2016-03-29 01:24:07 +02:00
60192db921
Renamed everything to 'progress' instead of 'completed'
2016-03-28 08:37:18 +02:00
b4cc27c761
Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked.
...
Same as marking the lesson complete green checkbox
2016-03-27 17:46:06 +02:00
1815494681
Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user #179
...
- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project
2016-03-19 12:40:28 +01:00
7a7fb088ad
#173 Added the URL for WebGoat to the console output
2016-03-18 14:38:49 +01:00
25f08ea9b4
-- Remove raw type usage, add type check parameter.
...
-- Remove unused variable and unused imports.
2016-02-23 15:15:47 +02:00
daa05dd192
Seems locale should not depend of request's Accept-Language header.
...
Signed-off-by: Nanne Baars <nbaars@xebia.com >
2016-02-12 23:42:21 +01:00
dbb75980c9
Merge pull request #197 from span/htmlencoder
...
Fixes #195 by adding static initialisation of the maps
2016-02-12 13:02:41 -05:00
77c4a04d3d
Fixes #195 by adding static initialisation of the maps rather then using the constructor
2016-02-04 23:27:31 +01:00
59549e3b21
Add stage parameter in the session to keep track of current stage so that we do not reset the stage and recreate the database in the middle of a lesson. To do this a small refactor of WebSession was made which simply extracts some methods from the previously large update method. Ref #176 .
2016-02-04 23:21:12 +01:00
