Commit Graph

17 Commits

Author SHA1 Message Date
37e9359c9e #841: Clarify the lesson based on the comments
- Output messages more clear
- Replace success to failure (otherwise lesson is marked complete immediately)
- Fix the layout of the lesson (remove whitespace update buttons)
2020-11-04 20:35:05 +01:00
b8e68d13b8 implement xss (mitigation) assignment 6 2019-03-26 08:43:38 +01:00
53c16c8b82 fixed minor spelling mistakes, unified wording 2019-03-26 08:43:38 +01:00
387a0e8e7d assignment now has working feedback 2019-03-26 08:43:38 +01:00
0bd14d9178 (wrong branch) updated assignment (OWASP Java Encoder) and hints (still not shown) 2019-03-26 08:43:38 +01:00
8bc91ba4ec finished assignment 2019-03-26 08:43:38 +01:00
8944bfcc1d implemented xss mitigation assignment 1, draft validation without parser 2019-03-26 08:43:38 +01:00
eb29ed00ff Removed old unused files from XSS 2019-03-26 08:43:38 +01:00
2ee3b22207 Reworked some XSS assignments 2019-03-26 08:43:38 +01:00
990bf079d3 Added hints for dom-based xss assignment (part 2) 2019-03-26 08:43:38 +01:00
362671e67e Added hints for dom-based xss assignment (part 1) 2019-03-26 08:43:38 +01:00
46f92dad3b Added hints for Reflected XSS assignment. 2019-03-26 08:43:38 +01:00
2962ddbb3e Restructured XSS category. Updated gitignore to ignore TestClass.class. 2019-03-26 08:43:38 +01:00
7068c84c6a Fix parameter in url and some spelling 2018-06-12 10:54:13 +02:00
e4ca0c4836 Make report working again 2018-04-27 19:26:01 +02:00
82ef171a50 XSS Lesson Modifications (#367)
* initial cut on XSS, need to add some tests still

* initial unit tests for assignment endpoints

* updating header comment license thingy

* comment, clean up

* Stubs for security unit test

* Additional Unit Testing

* isEncoded and isNotEncoded Unit Tests added

* http-proxies updates

* update for XXE solutions

* Work-around to handle special chars in action ... currently to be able to match {userId} in hint creation/assignment for IDOR

* IDOR hints updated

* mitigation content update

* mitigation content update ... 2

* Lesson Overview updates

* including restart lesson fix for lesson overview
2017-07-10 08:33:10 -04:00
259fd19c1b - Introduced user registration
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server
- Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson.
- Simplied loading of resources, by adding resource mappings in MvcConfig.
- Refactored plugin loading, now only one class is left for loading the lessons.
2017-03-22 11:35:14 +01:00