dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,025 Commits 11 Branches 78 Tags
e5d5a370f966d034a8efb4dc4e08819882477fdb
Commit Graph

3025 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ruslan Boyarsky
daa05dd192 Seems locale should not depend of request's Accept-Language header. 
Signed-off-by: Nanne Baars <nbaars@xebia.com>
 2016-02-12 23:42:21 +01:00
mayhew64
dbb75980c9 Merge pull request #197 from span/htmlencoder 
Fixes #195 by adding static initialisation of the maps
 2016-02-12 13:02:41 -05:00
mayhew64
727e4ff56c Merge pull request #196 from span/xss-lab 
Add stage parameter in the session to keep track of current stage
 2016-02-12 13:01:31 -05:00
mayhew64
d89362226e Merge pull request #193 from nbaars/develop 
webgoat-container should unpack all the lessons #192
 2016-02-12 12:59:36 -05:00
Daniel Kvist
77c4a04d3d Fixes #195 by adding static initialisation of the maps rather then using the constructor 2016-02-04 23:27:31 +01:00
Daniel Kvist
59549e3b21 Add stage parameter in the session to keep track of current stage so that we do not reset the stage and recreate the database in the middle of a lesson. To do this a small refactor of WebSession was made which simply extracts some methods from the previously large update method. Ref #176. 2016-02-04 23:21:12 +01:00
Nanne Baars
1d2a612c1f webgoat-container should unpack all the lessons #192 2016-02-02 00:42:10 +01:00
Doug Morato
724c084abf Updading develop branch pom versions to 7.1-SNAPSHOT 2016-02-01 18:30:53 -05:00
Doug Morato
f825bead8b The OWASP WebGoat 7.0.1 Release 7.0.1 2016-02-01 18:09:48 -05:00
Doug Morato
f5290faaf0 Merge pull request #191 from span/disable-xss-lesson 
Disable cross-site scripting lab
 2016-02-01 16:18:59 -05:00
Daniel Kvist
370c34b7da Disable cross-site scripting lab 2016-02-01 21:47:28 +01:00
Doug Morato
35e9b36b00 [maven-release-plugin] prepare for next development iteration 2016-02-01 13:57:19 -05:00
Doug Morato
dcf1995fe8 [maven-release-plugin] prepare release 7.0 2016-02-01 13:57:16 -05:00
Doug Morato
3d3edfa809 Merge pull request #190 from dougmorato/master 
Adding OSSRH Repository on Parent Pom
 2016-02-01 00:03:21 -05:00
Doug Morato
9997b61995 Adding OSSRH Repository on Parent Pom 
In order to push it to The Maven Central Repository, adding the OSSRH repo under distributionManagement on the Parent Pom

Signed-off-by: Doug Morato <dm@corp.io>
 2016-01-31 23:57:49 -05:00
Doug Morato
8c97acda8a Merge pull request #189 from dougmorato/master 
Setting GPG keyname as WebGoat in Parent Pom
 2016-01-31 23:32:18 -05:00
Doug Morato
3bd9d87b42 Setting GPG keyname as WebGoat in Parent Pom 
In order to specify which key to use for signing the JAR/WAR, add the keyname configuration under the Release Profile on the Parent Pom

Signed-off-by: Doug Morato <dm@corp.io>
 2016-01-31 23:31:20 -05:00
Doug Morato
61d8e20b09 Merge pull request #188 from dougmorato/master 
Fixining all the javadoc issues preventing the release
 2016-01-31 23:27:29 -05:00
Doug Morato
6320c2d22d Fixining all the javadoc issues preventing the release 
In order to perfom a Sonatype OSS release, all the javadocs must pe corretly and completely parsed in order to pass the release requirement.
This comment is only adding "comments' pertaining to javadoc. NO CODE HAS BEEN CHANGED

Signed-off-by: Doug Morato <dm@corp.io>
 2016-01-31 23:14:50 -05:00
Doug Morato
35a39777af Merge pull request #187 from dougmorato/master 
Improving WebGoat Developer Bootstrap Script
 2016-01-31 22:38:36 -05:00
Doug Morato
6826d0eeba Improving WebGoat Developer Bootstrap Script 
Improved the Developer Bootstratp script to perform some checking for tools and pull the git repo if directory already exists

Signed-off-by: Doug Morato <dm@corp.io>
 2016-01-31 22:36:29 -05:00
mayhew64
b937e5936c Merge pull request #185 from mayhew64/master 
issue #147 disabling broken lessons
 2016-01-30 13:48:42 -05:00
mayhew64
416fda799b issue #147 disabling broken lessons 2016-01-30 13:45:26 -05:00
Nanne
f94d8121d0 Merge pull request #172 from misfir3/master 
#167 removing refrences to github.io in code
 2016-01-18 15:57:19 +01:00
Jason White
76fa797857 #167 removing refrences to github.io in code 2016-01-18 06:42:05 -05:00
Nanne
8d87830472 Merge pull request #166 from misfir3/master 
#165 support for custom submitMethod
 2016-01-15 17:38:26 +01:00
Jason White
07f0cea0a0 #165 cleaning up interim code 2016-01-14 09:03:43 -05:00
Jason White
b3541231bc #165 provide default and ability to override in lesson 2016-01-14 09:01:47 -05:00
Nanne
1a7535e3e2 Merge pull request #164 from dougmorato/master 
Remove Coverity Badge from README
 2016-01-09 09:35:54 +02:00
Doug Morato
daed6a648f Remove Coverity Badge from README 
WebGoat does not endorse any specificy Static Code Analysis Vendor, so removing Coverity Badge in order not to send mixed messages

Signed-off-by: Doug Morato <dm@corp.io>
 2016-01-08 12:59:15 -05:00
misfir3
241ed0f47a Merge pull request #163 from nbaars/master 
Seems the CI checks are not directly related to the code updates. Review of the code looks OK ... merging.
 2016-01-08 12:56:50 -05:00
Nanne Baars
e1be080eea Forced browsing lesson does not show success #143 2016-01-06 18:47:59 +02:00
misfir3
2be182f603 Merge pull request #155 from nbaars/master 
Moving lesson utilities to common project instead of AbstractLesson
 2015-12-12 12:26:44 -05:00
Nanne Baars
23a1f9e38e Removed obsolete classes 2015-12-08 22:58:33 +01:00
Nanne Baars
5dfd1c44e9 Moving lesson utilities to common project instead of AbstractLesson 2015-12-03 22:52:11 +01:00
Nanne
5bd348f975 Merge pull request #153 from misfir3/master 
#133 hiding hint on change of lesson/loesson load
 2015-12-02 21:34:32 +01:00
Jason White
539985c59e #45 finally won't see two 'Stored XSS lessons hightlighted 2015-12-02 15:08:32 -05:00
Jason White
0628a27b34 clean up 2015-12-02 15:06:10 -05:00
Jason White
d4af09c72a #133 hiding hint on change of lesson/loesson load 2015-12-02 14:05:22 -05:00
mayhew64
e530be6e3e Update README.MD 2015-11-30 08:58:23 -05:00
mayhew64
78a19c9e80 Update README.MD 2015-11-30 08:58:04 -05:00
mayhew64
eb46123cf2 Merge pull request #152 from mayhew64/master 
changed back to compile phase, package phase breaks the war-exec.jar …
 2015-11-30 08:53:03 -05:00
mayhew64
023966fbb1 changed back to compile phase, package phase breaks the war-exec.jar construction 2015-11-30 08:51:53 -05:00
mayhew64
511ed91130 Merge pull request #147 from ilatypov/master 
Tidy up CSRF lessons.
 2015-11-24 19:44:24 -05:00
mayhew64
8284f08413 Merge pull request #149 from aravindc26/master 
Fixes typo in README
 2015-11-20 12:38:06 -05:00
aravindc26
62a4056d9b Fixes typo in README 2015-11-20 00:07:04 +05:30
mayhew64
4c4753784d Merge pull request #148 from slavP/eclipseImportFix 
#66 Fixing jar plugin lifecycle issue
 2015-11-12 16:43:54 -05:00
slav pilus
4c538ee398 #66 Fixing jar plugin lifecycle issue 2015-11-12 20:49:51 +00:00
Ilguiz Latypov
ea1d852cda Convert the message number parameter into the MVC route part. Correct the result of the restart lesson button. 2015-11-07 05:43:40 -05:00
Ilguiz Latypov
de71f2700e Let user-composed (CSRF) attacks send one-request actions, as opposed to the address bar MVC links requesting lessons. The lesson display servlets have javascript that requests data and actions. 2015-11-07 05:43:31 -05:00