dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,897 Commits 11 Branches 78 Tags
Commit Graph

202 Commits

Author SHA1 Message Date
Nanne Baars
2699a67c8a wip 2016-10-11 15:48:26 -04:00
Nanne Baars
d9e7ab724d disabling csrf 2016-10-11 11:41:48 -04:00
Jason White
7d2f1f0a3a temp fix 2016-10-11 09:20:39 -04:00
Ruben van Vreeland
c6ce0da44c Remove Exception from method signature 
Removed null checking in favor of boolean which is explicitly value based.
 2016-09-14 22:06:43 +02:00
Nanne Baars
b63f2ae44e Removed isDefuseOsCommands (no longer necessary) 2016-09-12 21:54:40 +02:00
Nanne Baars
8e9bebacd7 - Added more testcases since now we have static IDs for the lessons. 
- Changed the RestartLessonService because returning the text/html triggered the browser to show a popup which made the Selenium tests fail.
 2016-09-11 20:51:38 +02:00
Nanne Baars
8050bd52c4 Navigation and links are not the same after reboot #194 2016-09-10 16:14:10 +02:00
Nanne Baars
b250af3564 Introduced stanalone project which allows us to pass arguments to the Tomcat instance (eg port, address) 2016-09-09 18:35:31 +02:00
Nanne Baars
61d5116d44 Intermediate result for calling multiple lesson endpoints 2016-08-18 21:15:12 +02:00
Nanne Baars
c0ab7b7d1c Getting the attack verification to work 2016-08-08 19:38:24 +02:00
Jason White
e3c488c624 reverting local test that was committed 2016-07-26 17:12:37 -04:00
Jason White
c5535603dc committing for local test purposes unrelated to webgoat 2016-07-26 17:09:29 -04:00
b1rd0fb3auty14
a20532921a How to create a Legacy Lesson - instruction edit #177 
Commit to fix the following issues.

1. Update the user guide to point to the wiki.
2. Add the slack channel
3. Change the feedback email to point to the group mailing list.
 2016-07-16 19:08:53 +02:00
Nanne Baars
2d39ab90d2 Doesn't run with tomcat8 #161 
- antiJarLocking is no longer supported in Tomcat 8. Because we have will move towards Spring Boot we will have a much better way to reload plugins so investigating the difference between Tomcat 7 and 8 is not the way to go.
 2016-07-09 19:38:08 +02:00
Jason White
bc30634f99 temporary restoration of isDefuseOSCommands 2016-07-06 13:33:35 -04:00
Jason White
8e862ba9c3 changing to 'id' for linking in YmlBasedLesson 2016-07-05 08:22:37 -04:00
Nanne Baars
c350e86772 YML config should override lesson class 2016-06-29 12:08:13 +02:00
Nanne Baars
0a26e05ca5 for the menu part 2016-06-29 11:40:18 +02:00
Jason White
1761868cec Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot 2016-06-29 10:45:58 +02:00
Nanne Baars
f12c06fc55 Reading yml file based lesson configuration 2016-06-29 07:14:39 +02:00
Jason White
f203f38702 Merge remote-tracking branch 'upstream/feature/spring-boot' into feature/spring-boot 2016-06-28 17:04:12 +02:00
Jason White
501ec1f9e0 Turning off caching in spring boot for dev purposes 2016-06-28 16:22:50 +02:00
Nanne Baars
966e5b9e0a Added Docker support. 2016-06-28 07:46:34 +02:00
Nanne Baars
374ae376e3 clean up 2016-06-02 21:59:08 +02:00
Nanne Baars
63398aaf6d Thymeleaf works with AsciiDoc 2016-05-15 10:38:22 +02:00
Nanne Baars
e8628599fe Thymeleaf resolver does not need WebSession anymore 2016-05-13 15:57:52 +02:00
Nanne Baars
22d2255664 Made lesson resolution with Thymeleaf dynamic 2016-05-13 15:42:48 +02:00
Nanne Baars
4a19ddf40a Endpoints provided by lessons now work 2016-05-13 14:45:53 +02:00
Nanne Baars
79102c6ddd Lessons which load JavaScript etc now works 2016-04-26 18:59:51 +02:00
Nanne Baars
9066e45725 Updating README and moving webapp dir to old 2016-04-10 21:22:20 +02:00
Nanne Baars
289da771c9 Login and logout works together with context root 2016-04-10 14:56:27 +02:00
Nanne Baars
d0acfc00c0 Menu options about version, user info work again. 2016-04-09 22:08:40 +02:00
Nanne Baars
576333af7c Merging changes from Daniel back into the Spring Boot structure 
- different js location
  - Fixed label debugging which kept on reloading and reloading the lesson
  - Changes from .jsp merged into .html
 2016-04-09 15:40:53 +02:00
Nanne Baars
a8ea4a16e6 Images from solutions are loading again 2016-04-09 14:09:34 +02:00
Nanne Baars
8ff02cab6d Fully working WebGoat after migrating to Spring Boot. 2016-04-09 14:09:29 +02:00
Nanne Baars
ecc8cb391b First attempt to remove JSP and move to Thymeleaf and update to Spring Boot. The Thymeleaf templates can be loaded as snippets which makes it more easy to move away from ECS and create normal HTML pages for a lesson. 2016-04-09 14:06:03 +02:00
Nanne
a8f8d4b4fa Merge pull request #228 from span/developer-controls 
Developer controls
 2016-04-08 18:27:29 +02:00
Nanne
263ce31db3 Merge pull request #224 from WebGoat/feature/137 
Admin should also be able to see the solution, source and lesson plan.
 2016-04-08 18:27:21 +02:00
Nanne
407a5a810b Merge pull request #220 from WebGoat/feature/169 
Feature/169
 2016-04-08 18:27:12 +02:00
Daniel Kvist
e6fb74fa55 Implementation of developer controls to reload plugins and set label debugging from the GUI. Ref: webgoat/webgoat#93 2016-03-30 22:07:11 +02:00
Nanne Baars
b06d9ffd81 Admin should also be able to see the solution, source and lesson plan. 2016-03-29 01:24:07 +02:00
Nanne Baars
60192db921 Renamed everything to 'progress' instead of 'completed' 2016-03-28 08:37:18 +02:00
Nanne Baars
b4cc27c761 Lesson completed message is now within js which makes it possible to show the Congratulation message after the CSRF link has been clicked. 
Same as marking the lesson complete green checkbox
 2016-03-27 17:46:06 +02:00
Nanne Baars
1815494681 Injection Flaws -> Limit Command Injection success to a set of commands and clarify this to the user #179 
- Defuse command boolean flag is no longer necessary due to a change in the lesson, removed this flag from the webgoat-container project
 2016-03-19 12:40:28 +01:00
Nanne Baars
7a7fb088ad #173 Added the URL for WebGoat to the console output 2016-03-18 14:38:49 +01:00
muzir
25f08ea9b4 -- Remove raw type usage, add type check parameter. 
-- Remove unused variable and unused imports.
 2016-02-23 15:15:47 +02:00
Ruslan Boyarsky
daa05dd192 Seems locale should not depend of request's Accept-Language header. 
Signed-off-by: Nanne Baars <nbaars@xebia.com>
 2016-02-12 23:42:21 +01:00
mayhew64
dbb75980c9 Merge pull request #197 from span/htmlencoder 
Fixes #195 by adding static initialisation of the maps
 2016-02-12 13:02:41 -05:00
Daniel Kvist
77c4a04d3d Fixes #195 by adding static initialisation of the maps rather then using the constructor 2016-02-04 23:27:31 +01:00
Daniel Kvist
59549e3b21 Add stage parameter in the session to keep track of current stage so that we do not reset the stage and recreate the database in the middle of a lesson. To do this a small refactor of WebSession was made which simply extracts some methods from the previously large update method. Ref #176. 2016-02-04 23:21:12 +01:00