Commit Graph

1213 Commits

Author SHA1 Message Date
dcf1995fe8 [maven-release-plugin] prepare release 7.0 2016-02-01 13:57:16 -05:00
3d3edfa809 Merge pull request #190 from dougmorato/master
Adding OSSRH Repository on Parent Pom
2016-02-01 00:03:21 -05:00
9997b61995 Adding OSSRH Repository on Parent Pom
In order to push it to The Maven Central Repository, adding the OSSRH repo under distributionManagement on the Parent Pom

Signed-off-by: Doug Morato <dm@corp.io>
2016-01-31 23:57:49 -05:00
8c97acda8a Merge pull request #189 from dougmorato/master
Setting GPG keyname as WebGoat in Parent Pom
2016-01-31 23:32:18 -05:00
3bd9d87b42 Setting GPG keyname as WebGoat in Parent Pom
In order to specify which key to use for signing the JAR/WAR, add the keyname configuration under the Release Profile on the Parent Pom

Signed-off-by: Doug Morato <dm@corp.io>
2016-01-31 23:31:20 -05:00
61d8e20b09 Merge pull request #188 from dougmorato/master
Fixining all the javadoc issues preventing the release
2016-01-31 23:27:29 -05:00
6320c2d22d Fixining all the javadoc issues preventing the release
In order to perfom a Sonatype OSS release, all the javadocs must pe corretly and completely parsed in order to pass the release requirement.
This comment is only adding "comments' pertaining to javadoc. NO CODE HAS BEEN CHANGED

Signed-off-by: Doug Morato <dm@corp.io>
2016-01-31 23:14:50 -05:00
35a39777af Merge pull request #187 from dougmorato/master
Improving WebGoat Developer Bootstrap Script
2016-01-31 22:38:36 -05:00
6826d0eeba Improving WebGoat Developer Bootstrap Script
Improved the Developer Bootstratp script to perform some checking for tools and pull the git repo if directory already exists

Signed-off-by: Doug Morato <dm@corp.io>
2016-01-31 22:36:29 -05:00
b937e5936c Merge pull request #185 from mayhew64/master
issue #147 disabling broken lessons
2016-01-30 13:48:42 -05:00
416fda799b issue #147 disabling broken lessons 2016-01-30 13:45:26 -05:00
f94d8121d0 Merge pull request #172 from misfir3/master
#167 removing refrences to github.io in code
2016-01-18 15:57:19 +01:00
76fa797857 #167 removing refrences to github.io in code 2016-01-18 06:42:05 -05:00
8d87830472 Merge pull request #166 from misfir3/master
#165 support for custom submitMethod
2016-01-15 17:38:26 +01:00
07f0cea0a0 #165 cleaning up interim code 2016-01-14 09:03:43 -05:00
b3541231bc #165 provide default and ability to override in lesson 2016-01-14 09:01:47 -05:00
1a7535e3e2 Merge pull request #164 from dougmorato/master
Remove Coverity Badge from README
2016-01-09 09:35:54 +02:00
daed6a648f Remove Coverity Badge from README
WebGoat does not endorse any specificy Static Code Analysis Vendor, so removing Coverity Badge in order not to send mixed messages

Signed-off-by: Doug Morato <dm@corp.io>
2016-01-08 12:59:15 -05:00
241ed0f47a Merge pull request #163 from nbaars/master
Seems the CI checks are not directly related to the code updates. Review of the code looks OK ... merging.
2016-01-08 12:56:50 -05:00
e1be080eea Forced browsing lesson does not show success #143 2016-01-06 18:47:59 +02:00
2be182f603 Merge pull request #155 from nbaars/master
Moving lesson utilities to common project instead of AbstractLesson
2015-12-12 12:26:44 -05:00
23a1f9e38e Removed obsolete classes 2015-12-08 22:58:33 +01:00
5dfd1c44e9 Moving lesson utilities to common project instead of AbstractLesson 2015-12-03 22:52:11 +01:00
5bd348f975 Merge pull request #153 from misfir3/master
#133 hiding hint on change of lesson/loesson load
2015-12-02 21:34:32 +01:00
539985c59e #45 finally won't see two 'Stored XSS lessons hightlighted 2015-12-02 15:08:32 -05:00
0628a27b34 clean up 2015-12-02 15:06:10 -05:00
d4af09c72a #133 hiding hint on change of lesson/loesson load 2015-12-02 14:05:22 -05:00
e530be6e3e Update README.MD 2015-11-30 08:58:23 -05:00
78a19c9e80 Update README.MD 2015-11-30 08:58:04 -05:00
eb46123cf2 Merge pull request #152 from mayhew64/master
changed back to compile phase, package phase breaks the war-exec.jar …
2015-11-30 08:53:03 -05:00
023966fbb1 changed back to compile phase, package phase breaks the war-exec.jar construction 2015-11-30 08:51:53 -05:00
511ed91130 Merge pull request #147 from ilatypov/master
Tidy up CSRF lessons.
2015-11-24 19:44:24 -05:00
8284f08413 Merge pull request #149 from aravindc26/master
Fixes typo in README
2015-11-20 12:38:06 -05:00
62a4056d9b Fixes typo in README 2015-11-20 00:07:04 +05:30
4c4753784d Merge pull request #148 from slavP/eclipseImportFix
#66 Fixing jar plugin lifecycle issue
2015-11-12 16:43:54 -05:00
4c538ee398 #66 Fixing jar plugin lifecycle issue 2015-11-12 20:49:51 +00:00
ea1d852cda Convert the message number parameter into the MVC route part. Correct the result of the restart lesson button. 2015-11-07 05:43:40 -05:00
de71f2700e Let user-composed (CSRF) attacks send one-request actions, as opposed to the address bar MVC links requesting lessons. The lesson display servlets have javascript that requests data and actions. 2015-11-07 05:43:31 -05:00
05a1f5dd3a Merge pull request #140 from dougmorato/master
Updated pom versions and cache .m2 on travis to speed build time
2015-10-28 19:11:02 +01:00
ba20f8d14b Fix javax.mail dependecy and update versions
Signed-off-by: Doug Morato <dm@corp.io>
2015-10-27 22:15:14 -04:00
44b20bfc89 Caching .m2 repository to speed the Travis build
Signed-off-by: Doug Morato <dm@corp.io>
2015-10-27 21:19:12 -04:00
0997c860eb Merge pull request #136 from dougmorato/master
Update dependency version, build number and unregister DB driver
2015-10-27 19:52:32 +01:00
e8e1e904ec Updating dependencies and plugin versions
Updated all the outdated dependencies and plugin versions not related to Spring and Java EE

Signed-off-by: Doug Morato <dm@corp.io>
2015-10-26 18:47:18 -04:00
4a43a5572e Unregister JDBC drivers, Fixes #134
Upon calling the maven tomcat7:shutdown goal, a severe error message was thrown because of not unloading the JDBC drivers.

Signed-off-by: Doug Morato <dm@corp.io>
2015-10-26 18:23:27 -04:00
cf84e674b7 Fix typo on pom.xml
Bruce's developer id was mistyped.

Signed-off-by: Doug Morato <dm@corp.io>
2015-10-26 18:18:31 -04:00
bdc99f305a Travis build number now available from admin page
On the About page, the travis build numbers will be reflected on the build: property

Signed-off-by: Doug Morato <dm@corp.io>
2015-10-26 18:18:07 -04:00
10e2b044e9 Merge pull request #132 from nbaars/master
Shutdown threadPools after plugin loading
2015-10-26 16:48:50 -04:00
789a57e792 SEVERE: The web application [/WebGoat] appears to have started a thread named [pool-7-thread-5] but has failed to stop it. This is very likely to create a memory leak #124 2015-10-26 21:38:30 +01:00
5c3f77d84b Merge pull request #131 from dougmorato/master
Do not clean before mvn cobertura and coveralls
2015-10-26 10:48:57 -04:00
ff6a9b0295 Do not clean before mvn cobertura and coveralls
By cleaning before tbe cobertura goal, this was removing the exec.jar and the war file.

Signed-off-by: Doug Morato <dm@corp.io>
2015-10-26 10:48:34 -04:00