bab1f6aeb7 
					 
					
						
						
							
							Reported by dwpoon, Yesterday (17 hours ago)  
						
						... 
						
						
						
						I would like to submit the attached patch to avoid hard-coding
"/WebGoat" as the webapp's context path, at least for the HTTP splitting
lesson.  This issue has also been reported in July 2007; see
https://lists.owasp.org/pipermail/owasp-webgoat/2007-July/000432.html 
Also see Issue 15 http://code.google.com/p/webgoat/issues/detail?id=15 
git-svn-id: http://webgoat.googlecode.com/svn/trunk@366  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-11-21 12:57:14 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						58aa49317a 
					 
					
						
						
							
							Contribution by Kristian Erik Hermansen.  Fixed to work with 1.6  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@365  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-09-09 15:32:23 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5337ef31ff 
					 
					
						
						
							
							minor bug fixes and enhancements, including proper dollar value formatting  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@364  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-08-14 14:31:17 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						68357637bc 
					 
					
						
						
							
							removing unused folder  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@363  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-08-14 12:56:14 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4c242f52dc 
					 
					
						
						
							
							minor changes and improving display issues  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@362  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-08-12 17:36:30 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a3990f549e 
					 
					
						
						
							
							some cleanup, and removing unneeded ClassNotFoundExceptions  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@361  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-08-12 14:33:22 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2203a1ebd2 
					 
					
						
						
							
							corrected spelling and some formatting  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@360  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-08-11 14:39:09 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ba6560b24a 
					 
					
						
						
							
							Formatting according to OWASP WebGoat Java Style  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@359  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-08-05 17:32:17 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						acab6e9274 
					 
					
						
						
							
							Removed build.xml  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@358  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-12 16:14:06 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8751d7579a 
					 
					
						
						
							
							Removed windows and changed to developer  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@357  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-12 16:05:17 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ae79118f55 
					 
					
						
						
							
							Logos that slipped through  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@356  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-12 16:04:22 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						d849168ce1 
					 
					
						
						
							
							Smaller eclipse workspace  
						
						... 
						
						
						
						Changed workspace name to reflect WebGoat 
Added the video solutions link
Update readmen to reflect contributions and new stuff
git-svn-id: http://webgoat.googlecode.com/svn/trunk@355  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-12 15:40:13 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c8908f6911 
					 
					
						
						
							
							Actually, I think the problem was happening because the lesson was returning the lesson HTML again incase of incorrect key to eval was throwing an error trying to evaluate a whole bunch of HTML. Fixed this by catching the exception and showing an appropriate message.  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@354  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-12 05:56:41 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						fbf2a079c8 
					 
					
						
						
							
							Added bug report  
						
						... 
						
						
						
						Added message for missing solutions
Minor edits to lesson plans
git-svn-id: http://webgoat.googlecode.com/svn/trunk@353  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-11 00:05:05 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2a0d5b62a4 
					 
					
						
						
							
							Minor wording changes  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@352  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-09 00:25:02 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5d75ed4cae 
					 
					
						
						
							
							Minor wording edits  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@351  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-09 00:21:32 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ec95ba4089 
					 
					
						
						
							
							Separated DB usage for messages in CSRF and Stored XSS  
						
						... 
						
						
						
						Many cosmetic english changes
Fixed IE rendering for Challenge
 
git-svn-id: http://webgoat.googlecode.com/svn/trunk@350  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-07-09 00:17:20 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b0ade9782e 
					 
					
						
						
							
							Minor 5.2 changes.  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@349  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-05-13 03:44:40 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ad0b90bd24 
					 
					
						
						
							
							Added doc directory back into main project root.  Build script moves doc to webcontent.  
						
						... 
						
						
						
						Changed how to work with WebGoat picture to have original buttons 
git-svn-id: http://webgoat.googlecode.com/svn/trunk@348  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-05-12 14:22:33 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						429fd7b0a9 
					 
					
						
						
							
							Alphabetized categories  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@347  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-05-12 13:10:17 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						9071b86a59 
					 
					
						
						
							
							Reorder categories to be alphabetized  
						
						... 
						
						
						
						Changed unvalidated input to parameter tampering
git-svn-id: http://webgoat.googlecode.com/svn/trunk@346  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-22 16:45:29 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bbcd546137 
					 
					
						
						
							
							5.2 Credits  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@345  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-22 15:38:21 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						243f8ca360 
					 
					
						
						
							
							Minor fixes  
						
						... 
						
						
						
						removed many System.out.printlns
delete extra solutions directory - wrong location
added 5.2 credits
git-svn-id: http://webgoat.googlecode.com/svn/trunk@344  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-22 15:34:54 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						14fa88396e 
					 
					
						
						
							
							No Changes - SVN Test  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@343  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-22 12:01:21 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c7776ece65 
					 
					
						
						
							
							Text edited  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@342  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-18 08:41:02 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						314c350079 
					 
					
						
						
							
							Minor changes... Tan gets now only updatet after it was correct  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@341  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-18 08:38:51 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2649bcb086 
					 
					
						
						
							
							Session Fixation instructions altered  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@340  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-15 09:43:34 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3a1397f178 
					 
					
						
						
							
							Session Fixation lesson plan and solution edited  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@339  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-15 09:43:01 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e2ca7f9a33 
					 
					
						
						
							
							Minor Bugfixes  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@338  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 13:28:25 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						80d07fb62c 
					 
					
						
						
							
							Minor fixes  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@337  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 12:03:55 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7ecf14530b 
					 
					
						
						
							
							Wireshark to useful tools added  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@336  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 09:24:12 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8182db6dc4 
					 
					
						
						
							
							InsecureLogin Credits added. Instructions changed  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@335  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 08:35:33 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						efd77a001e 
					 
					
						
						
							
							InsecureLogin solution edited  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@334  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 08:33:30 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						40a997f6be 
					 
					
						
						
							
							SessionFixation and TomcatSetup edited  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@333  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 07:50:12 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						11fa11ec87 
					 
					
						
						
							
							git-svn-id:  http://webgoat.googlecode.com/svn/trunk@332  4033779f-a91e-0410-96ef-6bf7bf53c507  
						
						
						
						
					 
					
						2008-04-14 07:46:25 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b11b0903c7 
					 
					
						
						
							
							Lesson Instruction altered  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@331  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 07:44:57 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ff64cf84c0 
					 
					
						
						
							
							Introduction Sectin altered  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@330  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-14 07:42:28 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bb327cc3c8 
					 
					
						
						
							
							Solution changed. Figure added  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@329  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 22:18:33 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						691af307c5 
					 
					
						
						
							
							Insecure Login lesson plan and solution  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@328  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 22:17:49 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						55b36e911b 
					 
					
						
						
							
							InsecureLogin finished  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@327  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 22:17:07 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b24d805e93 
					 
					
						
						
							
							Minor changes  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@326  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 22:16:35 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						67f2783430 
					 
					
						
						
							
							CreateDB altered for insecure_communication altered  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@325  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 17:18:36 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						053112e7e0 
					 
					
						
						
							
							Insecure Communication added  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@324  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 17:05:51 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						1fca79e494 
					 
					
						
						
							
							Warnings fixed:  
						
						... 
						
						
						
						Unneded imports deleted
Never read variables deleted
git-svn-id: http://webgoat.googlecode.com/svn/trunk@323  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 15:15:09 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						89e67715fd 
					 
					
						
						
							
							Changed naming of Images: Image -> Figure  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@322  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 12:03:24 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						cfbfbd0313 
					 
					
						
						
							
							solution for MultiLevelLogin1 altered  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@321  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 11:54:42 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f58d8ee066 
					 
					
						
						
							
							Typo  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@320  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 11:48:51 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4f712c1d5c 
					 
					
						
						
							
							Tomcat Lessons Plan added  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@319  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 09:26:42 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						265475391e 
					 
					
						
						
							
							Tomcat Setup instructions added  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@318  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-13 09:26:15 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						dc9daba1c0 
					 
					
						
						
							
							SessionFixation completed  
						
						... 
						
						
						
						git-svn-id: http://webgoat.googlecode.com/svn/trunk@317  4033779f-a91e-0410-96ef-6bf7bf53c507 
						
						
					 
					
						2008-04-12 08:28:54 +00:00