042a62624f
Fixed the classnames in the wsdd config file (moved to different package)
2016-03-29 00:17:01 +02:00
015dcbde38
Added image for Github developers documentation about lesson progress implementation.
2016-03-28 08:38:25 +02:00
60192db921
Renamed everything to 'progress' instead of 'completed'
2016-03-28 08:37:18 +02:00
765b212032
Merge pull request #219 from muzir/patch-1
...
Update README.MD
2016-03-27 17:46:51 +02:00
b4cc27c761
Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked.
...
Same as marking the lesson complete green checkbox
2016-03-27 17:46:06 +02:00
c11ecef099
Update README.MD
...
grammar fix
2016-03-25 10:28:07 +02:00
35bd866873
Merge pull request #214 from span/restart-button
...
Fix #213 by changing the id of the restart button to the correct id
2016-03-19 15:22:41 +01:00
1815494681
Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user #179
...
- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project
2016-03-19 12:40:28 +01:00
6c92f0629e
Fix #213 by changing the id of the restart button to the correct it
2016-03-18 21:11:49 +01:00
7a7fb088ad
#173 Added the URL for WebGoat to the console output
2016-03-18 14:38:49 +01:00
bc6b040f42
Injection Flaws | XPath Injection date file path issue #184
...
- Enabled the lesson again because lesson has been fixed
2016-03-18 13:39:18 +01:00
50c4d9c170
Removed duplicate entry
2016-03-18 13:17:10 +01:00
8738bb2e46
Merge pull request #210 from nxadm/develop
...
Fix shebang
2016-03-09 19:07:40 +01:00
dc56ff9359
Fix shebang
2016-03-09 15:41:32 +01:00
5d393d1d65
Merge pull request #207 from span/weak-auth-cookie-enable
...
Enable weak authentication cookie lesson
2016-02-25 22:07:46 +01:00
f5a5335e31
Merge pull request #205 from muzir/develop
...
-- Remove raw type usage, add type check parameter.
2016-02-25 22:06:24 +01:00
a9a7c18592
Enable weak authentication cookie lesson if webgoat/webgoat#181 is not reproducible
2016-02-24 15:23:03 +01:00
01636eae10
Merge pull request #203 from span/readme-7.0.1
...
Update package references in readme
2016-02-23 09:08:13 -05:00
3d7eb40787
Merge pull request #202 from misfir3/develop
...
Develop
2016-02-23 09:07:40 -05:00
25f08ea9b4
-- Remove raw type usage, add type check parameter.
...
-- Remove unused variable and unused imports.
2016-02-23 15:15:47 +02:00
82d4324b67
Update easy run links to package 7.0.1 and update developer references from 7.0-SNAPSHOT to 7.1-SNAPSHOT as noted by @diegochavezcarro in #200
2016-02-20 13:02:05 +01:00
575c940655
#180 , clean up
2016-02-18 21:26:32 -05:00
7c65441c8e
#180 , better management of show* buttons
2016-02-18 19:44:12 -05:00
daa05dd192
Seems locale should not depend of request's Accept-Language header.
...
Signed-off-by: Nanne Baars <nbaars@xebia.com >
2016-02-12 23:42:21 +01:00
dbb75980c9
Merge pull request #197 from span/htmlencoder
...
Fixes #195 by adding static initialisation of the maps
2016-02-12 13:02:41 -05:00
727e4ff56c
Merge pull request #196 from span/xss-lab
...
Add stage parameter in the session to keep track of current stage
2016-02-12 13:01:31 -05:00
d89362226e
Merge pull request #193 from nbaars/develop
...
webgoat-container should unpack all the lessons #192
2016-02-12 12:59:36 -05:00
77c4a04d3d
Fixes #195 by adding static initialisation of the maps rather then using the constructor
2016-02-04 23:27:31 +01:00
59549e3b21
Add stage parameter in the session to keep track of current stage so that we do not reset the stage and recreate the database in the middle of a lesson. To do this a small refactor of WebSession was made which simply extracts some methods from the previously large update method. Ref #176 .
2016-02-04 23:21:12 +01:00
1d2a612c1f
webgoat-container should unpack all the lessons #192
2016-02-02 00:42:10 +01:00
724c084abf
Updading develop branch pom versions to 7.1-SNAPSHOT
2016-02-01 18:30:53 -05:00
f825bead8b
The OWASP WebGoat 7.0.1 Release
7.0.1
2016-02-01 18:09:48 -05:00
f5290faaf0
Merge pull request #191 from span/disable-xss-lesson
...
Disable cross-site scripting lab
2016-02-01 16:18:59 -05:00
370c34b7da
Disable cross-site scripting lab
2016-02-01 21:47:28 +01:00
35e9b36b00
[maven-release-plugin] prepare for next development iteration
2016-02-01 13:57:19 -05:00
dcf1995fe8
[maven-release-plugin] prepare release 7.0
2016-02-01 13:57:16 -05:00
3d3edfa809
Merge pull request #190 from dougmorato/master
...
Adding OSSRH Repository on Parent Pom
2016-02-01 00:03:21 -05:00
9997b61995
Adding OSSRH Repository on Parent Pom
...
In order to push it to The Maven Central Repository, adding the OSSRH repo under distributionManagement on the Parent Pom
Signed-off-by: Doug Morato <dm@corp.io >
2016-01-31 23:57:49 -05:00
8c97acda8a
Merge pull request #189 from dougmorato/master
...
Setting GPG keyname as WebGoat in Parent Pom
2016-01-31 23:32:18 -05:00
3bd9d87b42
Setting GPG keyname as WebGoat in Parent Pom
...
In order to specify which key to use for signing the JAR/WAR, add the keyname configuration under the Release Profile on the Parent Pom
Signed-off-by: Doug Morato <dm@corp.io >
2016-01-31 23:31:20 -05:00
61d8e20b09
Merge pull request #188 from dougmorato/master
...
Fixining all the javadoc issues preventing the release
2016-01-31 23:27:29 -05:00
6320c2d22d
Fixining all the javadoc issues preventing the release
...
In order to perfom a Sonatype OSS release, all the javadocs must pe corretly and completely parsed in order to pass the release requirement.
This comment is only adding "comments' pertaining to javadoc. NO CODE HAS BEEN CHANGED
Signed-off-by: Doug Morato <dm@corp.io >
2016-01-31 23:14:50 -05:00
35a39777af
Merge pull request #187 from dougmorato/master
...
Improving WebGoat Developer Bootstrap Script
2016-01-31 22:38:36 -05:00
6826d0eeba
Improving WebGoat Developer Bootstrap Script
...
Improved the Developer Bootstratp script to perform some checking for tools and pull the git repo if directory already exists
Signed-off-by: Doug Morato <dm@corp.io >
2016-01-31 22:36:29 -05:00
b937e5936c
Merge pull request #185 from mayhew64/master
...
issue #147 disabling broken lessons
2016-01-30 13:48:42 -05:00
416fda799b
issue #147 disabling broken lessons
2016-01-30 13:45:26 -05:00
f94d8121d0
Merge pull request #172 from misfir3/master
...
#167 removing refrences to github.io in code
2016-01-18 15:57:19 +01:00
76fa797857
#167 removing refrences to github.io in code
2016-01-18 06:42:05 -05:00
8d87830472
Merge pull request #166 from misfir3/master
...
#165 support for custom submitMethod
2016-01-15 17:38:26 +01:00
07f0cea0a0
#165 cleaning up interim code
2016-01-14 09:03:43 -05:00