Commit Graph

3025 Commits

Author SHA1 Message Date
0225a7c501 Merge pull request #256 from RubieV/patch-1
Code cleanup using @Test(expected = Exception)
2016-09-15 20:49:24 +02:00
aaa69bbf78 Merge pull request #257 from RubieV/patch-2
Remove Exception from method signature
2016-09-15 20:49:15 +02:00
c6ce0da44c Remove Exception from method signature
Removed null checking in favor of boolean which is explicitly value based.
2016-09-14 22:06:43 +02:00
db5e418cbf Indicate exception thrown 2016-09-14 22:00:35 +02:00
fd010782eb Fix missing .class 2016-09-14 21:42:36 +02:00
22688622fd Code cleanup using @Test(expected = Exception)
Code edited in the browser, please run tests ;)
2016-09-14 21:35:52 +02:00
d753d8c863 #250 webgoat_developer_bootstrap.sh not working with Ubuntu (sh = dash) 2016-09-12 22:31:22 +02:00
b63f2ae44e Removed isDefuseOsCommands (no longer necessary) 2016-09-12 21:54:40 +02:00
2027a0ae7d Added testcases for lesson plan / solutions for lesson with stages. 2016-09-12 21:54:05 +02:00
7fa63cec81 - Improved the 'ajax form' it now uses the form method to create the ajax call (thanks to Felipe De Boni for suggesting this fix) 2016-09-12 21:37:00 +02:00
8e9bebacd7 - Added more testcases since now we have static IDs for the lessons.
- Changed the RestartLessonService because returning the text/html triggered the browser to show a popup which made the Selenium tests fail.
2016-09-11 20:51:38 +02:00
5460133a7d Standalone should also run on the the WebGoat context root 2016-09-11 20:50:12 +02:00
8050bd52c4 Navigation and links are not the same after reboot #194 2016-09-10 16:14:10 +02:00
4133089d09 Lessons should use POST 2016-09-10 15:32:11 +02:00
2470be7387 Copy lessons into plugin_lessons #254 2016-09-09 19:19:15 +02:00
79320e7665 Removing two lessons from the exclusion list. 2016-09-09 18:35:31 +02:00
07d0292820 Changing README.md to integrate the new standalone possibility 2016-09-09 18:35:31 +02:00
b250af3564 Introduced stanalone project which allows us to pass arguments to the Tomcat instance (eg port, address) 2016-09-09 18:35:31 +02:00
1fff86fa2d additional paging work 2016-08-30 12:17:13 -04:00
9f10fd7c57 Initial client side pagination 2016-08-30 12:17:13 -04:00
ac433305a9 intial rendering of first page/tab/section of content on load 2016-08-30 12:17:13 -04:00
12e2624eee bumping version on feature branch to reflect plans 2016-08-30 12:17:13 -04:00
56bad8e087 Merge pull request #252 from psiinon/patch-1
Added OWASP Labs badge
2016-08-22 08:45:09 -04:00
61d5116d44 Intermediate result for calling multiple lesson endpoints 2016-08-18 21:15:12 +02:00
cfca4df919 Added OWASP Labs badge 2016-08-15 11:41:51 +02:00
c0ab7b7d1c Getting the attack verification to work 2016-08-08 19:38:24 +02:00
34ffa62535 commenting out incomplete line 2016-07-29 16:37:52 -04:00
e3c488c624 reverting local test that was committed 2016-07-26 17:12:37 -04:00
c5535603dc committing for local test purposes unrelated to webgoat 2016-07-26 17:09:29 -04:00
a20532921a How to create a Legacy Lesson - instruction edit #177
Commit to fix the following issues.

1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list.
2016-07-16 19:08:53 +02:00
2d39ab90d2 Doesn't run with tomcat8 #161
- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go.
2016-07-09 19:38:08 +02:00
fc30ed9920 part two of temp. isDefuseOSCOmmand for #240 2016-07-06 13:45:04 -04:00
bc30634f99 temporary restoration of isDefuseOSCommands 2016-07-06 13:33:35 -04:00
f57d076fab turning off test in the interim 2016-07-05 08:24:28 -04:00
8e862ba9c3 changing to 'id' for linking in YmlBasedLesson 2016-07-05 08:22:37 -04:00
d27712affa incremental UI changes 2016-07-05 08:16:32 -04:00
c350e86772 YML config should override lesson class 2016-06-29 12:08:13 +02:00
0a26e05ca5 for the menu part 2016-06-29 11:40:18 +02:00
85fb5a2661 Merge pull request #246 from misfir3/feature/spring-boot
updates from day 1 @AppSec EU
2016-06-29 10:54:45 +02:00
1761868cec Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot 2016-06-29 10:45:58 +02:00
a8ac2d7a0c moving attack form to modal/overlay ... initial cut 2016-06-29 10:39:54 +02:00
f12c06fc55 Reading yml file based lesson configuration 2016-06-29 07:14:39 +02:00
f203f38702 Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot 2016-06-28 17:04:12 +02:00
501ec1f9e0 Turning off caching in spring boot for dev purposes 2016-06-28 16:22:50 +02:00
3f37b06d1f initial support for separation of content from attack in UI 2016-06-28 16:21:14 +02:00
0aa94a71e5 initial support for separation of content from attack in UI 2016-06-28 16:20:40 +02:00
966e5b9e0a Added Docker support. 2016-06-28 07:46:34 +02:00
2e64a4cc05 Merge pull request #243 from span/java-requirement
Update java required version as stated in webgoat/webgoat#234
2016-06-21 08:42:28 -04:00
51afbf6f84 Update java required version as stated in webgoat/webgoat#234 2016-06-20 23:40:55 +02:00
40c87b08af #240 Java Error Message in Lesson "How to Bypass a Path Based Access Control Scheme" 2016-06-02 22:04:21 +02:00