dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,286 Commits 11 Branches 78 Tags
Commit Graph

1286 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ruben van Vreeland
db5e418cbf Indicate exception thrown 2016-09-14 22:00:35 +02:00
Ruben van Vreeland
fd010782eb Fix missing .class 2016-09-14 21:42:36 +02:00
Ruben van Vreeland
22688622fd Code cleanup using @Test(expected = Exception) 
Code edited in the browser, please run tests ;)
 2016-09-14 21:35:52 +02:00
Nanne Baars
d753d8c863 #250 webgoat_developer_bootstrap.sh not working with Ubuntu (sh = dash) 2016-09-12 22:31:22 +02:00
Nanne Baars
b63f2ae44e Removed isDefuseOsCommands (no longer necessary) 2016-09-12 21:54:40 +02:00
Nanne Baars
2027a0ae7d Added testcases for lesson plan / solutions for lesson with stages. 2016-09-12 21:54:05 +02:00
Nanne Baars
7fa63cec81 - Improved the 'ajax form' it now uses the form method to create the ajax call (thanks to Felipe De Boni for suggesting this fix) 2016-09-12 21:37:00 +02:00
Nanne Baars
8e9bebacd7 - Added more testcases since now we have static IDs for the lessons. 
- Changed the RestartLessonService because returning the text/html triggered the browser to show a popup which made the Selenium tests fail.
 2016-09-11 20:51:38 +02:00
Nanne Baars
5460133a7d Standalone should also run on the the WebGoat context root 2016-09-11 20:50:12 +02:00
Nanne Baars
8050bd52c4 Navigation and links are not the same after reboot #194 2016-09-10 16:14:10 +02:00
Nanne Baars
4133089d09 Lessons should use POST 2016-09-10 15:32:11 +02:00
Nanne Baars
2470be7387 Copy lessons into plugin_lessons #254 2016-09-09 19:19:15 +02:00
Nanne Baars
79320e7665 Removing two lessons from the exclusion list. 2016-09-09 18:35:31 +02:00
Nanne Baars
07d0292820 Changing README.md to integrate the new standalone possibility 2016-09-09 18:35:31 +02:00
Nanne Baars
b250af3564 Introduced stanalone project which allows us to pass arguments to the Tomcat instance (eg port, address) 2016-09-09 18:35:31 +02:00
Bruce Mayhew
56bad8e087 Merge pull request #252 from psiinon/patch-1 
Added OWASP Labs badge
 2016-08-22 08:45:09 -04:00
Simon Bennetts
cfca4df919 Added OWASP Labs badge 2016-08-15 11:41:51 +02:00
b1rd0fb3auty14
a20532921a How to create a Legacy Lesson - instruction edit #177 
Commit to fix the following issues.

1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list.
 2016-07-16 19:08:53 +02:00
Nanne Baars
2d39ab90d2 Doesn't run with tomcat8 #161 
- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go.
 2016-07-09 19:38:08 +02:00
Jason White
fc30ed9920 part two of temp. isDefuseOSCOmmand for #240 2016-07-06 13:45:04 -04:00
Jason White
bc30634f99 temporary restoration of isDefuseOSCommands 2016-07-06 13:33:35 -04:00
mayhew64
2e64a4cc05 Merge pull request #243 from span/java-requirement 
Update java required version as stated in webgoat/webgoat#234
 2016-06-21 08:42:28 -04:00
Daniel Kvist
51afbf6f84 Update java required version as stated in webgoat/webgoat#234 2016-06-20 23:40:55 +02:00
Nanne Baars
40c87b08af #240 Java Error Message in Lesson "How to Bypass a Path Based Access Control Scheme" 2016-06-02 22:04:21 +02:00
mayhew64
efce972209 Merge pull request #239 from dilshanraja/dev-temp 
Updates to Dev Bootstrap
 2016-06-01 14:49:53 +01:00
Dilshan Rajapakse
4fc6a416dd Updates to Dev Bootstrap 
- Use '-e' option in script echo commands to enable interpretation of escape sequences -> to make bash colours work
- README changed to show proper execution instruction
 2016-05-21 20:11:50 +10:00
Nanne
7f91671c8f Merge pull request #229 from span/start-page-link 
Fix broken start/home link on logo
 2016-04-08 18:27:37 +02:00
Nanne
a8f8d4b4fa Merge pull request #228 from span/developer-controls 
Developer controls
 2016-04-08 18:27:29 +02:00
Nanne
263ce31db3 Merge pull request #224 from WebGoat/feature/137 
Admin should also be able to see the solution, source and lesson plan.
 2016-04-08 18:27:21 +02:00
Nanne
407a5a810b Merge pull request #220 from WebGoat/feature/169 
Feature/169
 2016-04-08 18:27:12 +02:00
Nanne
46b24d72c9 Merge pull request #212 from nbaars/develop 
Fixed #184
 2016-04-08 18:27:00 +02:00
Daniel Kvist
0401779f58 Fix broken test 2016-03-31 23:06:16 +02:00
Daniel Kvist
7758947711 Load welcome.mvc instead of start.mvc when navigating home on the log, fixes #218 2016-03-31 23:02:54 +02:00
Daniel Kvist
58ae7f3727 Move loading of developer controls so they do not reload every time. Also reload current lesson after reloading labels. Ref webgoat/webgoat#93. 2016-03-31 22:56:17 +02:00
Daniel Kvist
2be4248ea3 Add menu toggle to show/hide the controls. Ref webgoat/webgoat#93 2016-03-30 22:38:18 +02:00
Daniel Kvist
e6fb74fa55 Implementation of developer controls to reload plugins and set label debugging from the GUI. Ref: webgoat/webgoat#93 2016-03-30 22:07:11 +02:00
Nanne Baars
b06d9ffd81 Admin should also be able to see the solution, source and lesson plan. 2016-03-29 01:24:07 +02:00
Nanne
a52df28ec6 Merge pull request #223 from WebGoat/features/221 
Fixed the classnames in the wsdd config file (moved to different pack…
 2016-03-29 00:25:00 +02:00
Nanne Baars
042a62624f Fixed the classnames in the wsdd config file (moved to different package) 2016-03-29 00:17:01 +02:00
Nanne Baars
015dcbde38 Added image for Github developers documentation about lesson progress implementation. 2016-03-28 08:38:25 +02:00
Nanne Baars
60192db921 Renamed everything to 'progress' instead of 'completed' 2016-03-28 08:37:18 +02:00
Nanne
765b212032 Merge pull request #219 from muzir/patch-1 
Update README.MD
 2016-03-27 17:46:51 +02:00
Nanne Baars
b4cc27c761 Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked. 
Same as marking the lesson complete green checkbox
 2016-03-27 17:46:06 +02:00
erhun
c11ecef099 Update README.MD 
grammar fix
 2016-03-25 10:28:07 +02:00
Nanne
35bd866873 Merge pull request #214 from span/restart-button 
Fix #213 by changing the id of the restart button to the correct id
 2016-03-19 15:22:41 +01:00
Nanne Baars
1815494681 Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user #179 
- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project
 2016-03-19 12:40:28 +01:00
Daniel Kvist
6c92f0629e Fix #213 by changing the id of the restart button to the correct it 2016-03-18 21:11:49 +01:00
Nanne Baars
7a7fb088ad #173 Added the URL for WebGoat to the console output 2016-03-18 14:38:49 +01:00
Nanne Baars
bc6b040f42 Injection Flaws | XPath Injection date file path issue #184 
- Enabled the lesson again because lesson has been fixed
 2016-03-18 13:39:18 +01:00
Nanne Baars
50c4d9c170 Removed duplicate entry 2016-03-18 13:17:10 +01:00