cam.morris
d2a6a2b272
This change includes two additional CSRF lessons. One for
...
by-passing a prompt (showing why prompts don't work). The second for
by-passing CSRF tokens when XSS exists.
It also modifies the existing CSRF lesson so that the lesson
can be extended and used by the two new lessons.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@386 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:23:17 +00:00
brandon.devries
17af39e428
Formatting according to OWASP WebGoat Java Style
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@359 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-08-05 17:32:17 +00:00
mayhew64
71460125b6
Separated DB usage for messages in CSRF and Stored XSS
...
Many cosmetic english changes
Fixed IE rendering for Challenge
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@350 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-09 00:17:20 +00:00
mayhew64
a8db8989c8
Reformat of Java source. Added JavaStyle format definitions.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@287 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-02-27 00:29:19 +00:00
mayhew64
32fb29b6ee
Changed ExecuteQuery to executeUpdate to remove empty result set error which stopped the lesson from working for HSQLDB
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@276 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-02-05 21:24:20 +00:00
rogan.dawes
b0b94c4688
Miscellaneous bug fixes
...
divide by zero, inaccurate discount and totals, reflection of user input
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@273 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-01-14 14:02:11 +00:00
