Commit Graph

3025 Commits

Author SHA1 Message Date
87f09e5c92 moved property files to src/main/resources
git-svn-id: http://webgoat.googlecode.com/svn/trunk@396 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 15:08:35 +00:00
adad8cf836 added resources dir, removed catalina.jar which is only a build dependency
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@395 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 12:51:57 +00:00
16ad95bc8e added resources dir, removed catalina.jar which is only a build dependency
git-svn-id: http://webgoat.googlecode.com/svn/trunk@395 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 12:51:57 +00:00
5119e65791 renamed main->src regarding to Maven conventions
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@394 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:54:43 +00:00
e5730814c8 renamed main->src regarding to Maven conventions
git-svn-id: http://webgoat.googlecode.com/svn/trunk@394 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:54:43 +00:00
c1f2360a35 renamed project->main regarding to Maven conventions
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@393 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:16:30 +00:00
95643f4b2b renamed project->main regarding to Maven conventions
git-svn-id: http://webgoat.googlecode.com/svn/trunk@393 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:16:30 +00:00
f99fad493c renamed JavaSource -> java, WebContent -> webapp regarding to Maven convention
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@392 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:04:59 +00:00
791341000c renamed JavaSource -> java, WebContent -> webapp regarding to Maven convention
git-svn-id: http://webgoat.googlecode.com/svn/trunk@392 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:04:59 +00:00
6cc4a44d86 restored setAdmin method removed in r389 to make the trunk compile again
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@391 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 10:39:29 +00:00
bb15524a7a restored setAdmin method removed in r389 to make the trunk compile again
git-svn-id: http://webgoat.googlecode.com/svn/trunk@391 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 10:39:29 +00:00
1c02094545 Added 3 new lessons. Some strings are in the properties files, but not all. Modified CreateDB.java in order to create a new salaries table used by the new SQL injection lessons.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@390 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-30 04:53:19 +00:00
e15957ad68 Added 3 new lessons. Some strings are in the properties files, but not all. Modified CreateDB.java in order to create a new salaries table used by the new SQL injection lessons.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@390 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-30 04:53:19 +00:00
1dc6c799a7 A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:
1. Every text passage/label that appears in lessons must independent of the current language set for WebGoat.
2. Every lesson plan and solutions must be translated for each supported language.
Number 1 is achieved by using webgoat/util/WebgoatI18N.java and by having every output routed through this piece of code. You no longer say hints.add("Lesson Hint 1"); or ....addElement("Shopping Cart")) but you in the lesson you say hints.add(WebGoatI18N.get("Lesson Hint1")) or ....addElement(WebGoatI18N.get("Shopping Cart"). Then WebGoatI18N looks up the corresponding string for the language set as the current lanuage and returns it.
Number 2 is achieved by having subdirectories in lesson_plans corresponding to every language. That means, a lesson that has been translated to Spanish and German will be found in lesson_plans/English and lesson_plans/Spanish and lesson_plans/German.

This is how WebGoat finds out about available languages: in Course.java in loadResources() it looks for lesson plans.
Unlike before, now a lesson plan can be found multiple times in different "language" directories. So for every directory the lesson plan is found in, WebGoat associates this language with the lesson and also lets WebGoatI18N load the appropriate WebGoatLabels_$LANGAUGE$.properties file which contains the translations of labels.
So this is what you have to do for a new language:
First of all, you have to copy and translate every lesson plan that you need in the new language, and then you also have to create a WebGoatLabels_$LANGUAGE$.properties file with that labels that will be used in these lessons. Atm WebGoat crashes throws an exception when a label is missing but this can be sorted out quickly. 

git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@389 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-26 15:58:15 +00:00
fc08681d89 A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:
1. Every text passage/label that appears in lessons must independent of the current language set for WebGoat.
2. Every lesson plan and solutions must be translated for each supported language.
Number 1 is achieved by using webgoat/util/WebgoatI18N.java and by having every output routed through this piece of code. You no longer say hints.add("Lesson Hint 1"); or ....addElement("Shopping Cart")) but you in the lesson you say hints.add(WebGoatI18N.get("Lesson Hint1")) or ....addElement(WebGoatI18N.get("Shopping Cart"). Then WebGoatI18N looks up the corresponding string for the language set as the current lanuage and returns it.
Number 2 is achieved by having subdirectories in lesson_plans corresponding to every language. That means, a lesson that has been translated to Spanish and German will be found in lesson_plans/English and lesson_plans/Spanish and lesson_plans/German.

This is how WebGoat finds out about available languages: in Course.java in loadResources() it looks for lesson plans.
Unlike before, now a lesson plan can be found multiple times in different "language" directories. So for every directory the lesson plan is found in, WebGoat associates this language with the lesson and also lets WebGoatI18N load the appropriate WebGoatLabels_$LANGAUGE$.properties file which contains the translations of labels.
So this is what you have to do for a new language:
First of all, you have to copy and translate every lesson plan that you need in the new language, and then you also have to create a WebGoatLabels_$LANGUAGE$.properties file with that labels that will be used in these lessons. Atm WebGoat crashes throws an exception when a label is missing but this can be sorted out quickly. 

git-svn-id: http://webgoat.googlecode.com/svn/trunk@389 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-26 15:58:15 +00:00
59abed1dde Malcode samples - need to turn into lessons
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@388 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-26 11:24:12 +00:00
826b9e73bc Malcode samples - need to turn into lessons
git-svn-id: http://webgoat.googlecode.com/svn/trunk@388 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-26 11:24:12 +00:00
c3fe7cece9 Including one small documentation change: giving credit to Sherif Koussa's original CSRF lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@387 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:29:42 +00:00
d971d2f734 Including one small documentation change: giving credit to Sherif Koussa's original CSRF lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk@387 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:29:42 +00:00
d2a6a2b272 This change includes two additional CSRF lessons. One for
by-passing a prompt (showing why prompts don't work).  The second for
by-passing CSRF tokens when XSS exists. 

It also modifies the existing CSRF lesson so that the lesson
can be extended and used by the two new lessons.


git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@386 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:23:17 +00:00
85c6843ee4 This change includes two additional CSRF lessons. One for
by-passing a prompt (showing why prompts don't work).  The second for
by-passing CSRF tokens when XSS exists. 

It also modifies the existing CSRF lesson so that the lesson
can be extended and used by the two new lessons.


git-svn-id: http://webgoat.googlecode.com/svn/trunk@386 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:23:17 +00:00
b4af6471b1 Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@385 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-20 04:30:00 +00:00
72936c72b9 Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).
git-svn-id: http://webgoat.googlecode.com/svn/trunk@385 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-20 04:30:00 +00:00
4f3892a0b6 Re-adding .jar file that appears to have been removed recently. Re-adding this file should fix build some build errors.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@384 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-20 03:56:46 +00:00
cef196e172 Re-adding .jar file that appears to have been removed recently. Re-adding this file should fix build some build errors.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@384 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-20 03:56:46 +00:00
c1af5e86b0 initial version of pom.xml
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@383 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-12 21:06:55 +00:00
c00b8b2dfe initial version of pom.xml
git-svn-id: http://webgoat.googlecode.com/svn/trunk@383 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-12 21:06:55 +00:00
e3af09e500 infos to dependencies
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@382 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 15:19:25 +00:00
271d746153 infos to dependencies
git-svn-id: http://webgoat.googlecode.com/svn/trunk@382 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 15:19:25 +00:00
94378680ca replaced jars with versions from maven repo to prepare migration
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@381 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 13:47:42 +00:00
34270c8931 replaced jars with versions from maven repo to prepare migration
git-svn-id: http://webgoat.googlecode.com/svn/trunk@381 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 13:47:42 +00:00
62bc77cbe7 replaced jars with versions from maven repo to prepare migration
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@380 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 11:07:01 +00:00
24acd5081d replaced jars with versions from maven repo to prepare migration
git-svn-id: http://webgoat.googlecode.com/svn/trunk@380 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 11:07:01 +00:00
de18bc56d2 replaced axis jars with versions from maven repo; removed catalina.jar no longer needed
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@379 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-10 23:39:11 +00:00
c719c47128 replaced axis jars with versions from maven repo; removed catalina.jar no longer needed
git-svn-id: http://webgoat.googlecode.com/svn/trunk@379 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-10 23:39:11 +00:00
215caee8be fixed typo (Issue 29) - test commit
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@378 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-07 21:15:11 +00:00
87ce172faa fixed typo (Issue 29) - test commit
git-svn-id: http://webgoat.googlecode.com/svn/trunk@378 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-07 21:15:11 +00:00
4897249cb8 5.3 Logo
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@377 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-04 13:06:48 +00:00
f5200a8fd0 5.3 Logo
git-svn-id: http://webgoat.googlecode.com/svn/trunk@377 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-04 13:06:48 +00:00
976671949e Changed the credit card user to be the user that was logged in as. Also base64 encoded the user cookie to make finding sql injection slightly harder.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@376 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 18:16:51 +00:00
0032ffdbfc Changed the credit card user to be the user that was logged in as. Also base64 encoded the user cookie to make finding sql injection slightly harder.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@376 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 18:16:51 +00:00
b63d0a6886 Changed the class build.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@375 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 17:56:48 +00:00
cafcea2ae9 Changed the class build.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@375 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 17:56:48 +00:00
3cf801f58f Removed errors introduced in previous checkin. String and integer conflicts in JSP
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@374 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 17:55:27 +00:00
88a730f225 Removed errors introduced in previous checkin. String and integer conflicts in JSP
git-svn-id: http://webgoat.googlecode.com/svn/trunk@374 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 17:55:27 +00:00
b8c1d13e50 Lots of wording changes and HTML fixes.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@373 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-01-06 21:06:42 +00:00
97571dbe90 Lots of wording changes and HTML fixes.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@373 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-01-06 21:06:42 +00:00
8a372baa01 Fixing wording a smidge.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@372 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-01-06 20:19:22 +00:00
5506f1c279 Fixing wording a smidge.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@372 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-01-06 20:19:22 +00:00
01b845beb9 Changes by Chris Roe to fix lesson issues with FireFox.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@371 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-12-17 13:06:29 +00:00