4.0.0 org.springframework.boot spring-boot-starter-parent 3.1.0 org.owasp.webgoat webgoat 2023.5-SNAPSHOT jar WebGoat WebGoat, a deliberately insecure Web Application https://github.com/WebGoat/WebGoat 2006 OWASP https://github.com/WebGoat/WebGoat/ GNU General Public License, version 2 https://www.gnu.org/licenses/gpl-2.0.txt mayhew64 Bruce Mayhew webgoat@owasp.org OWASP https://github.com/WebGoat/WebGoat nbaars Nanne Baars nanne.baars@owasp.org https://github.com/nbaars Europe/Amsterdam misfir3 Jason White jason.white@owasp.org zubcevic René Zubcevic rene.zubcevic@owasp.org aolle Àngel Ollé Blázquez angel@olleb.com jwayman Jeff Wayman dcowden Dave Cowden lawson89 Richard Lawson dougmorato Doug Morato doug.morato@owasp.org OWASP https://github.com/dougmorato America/New_York https://avatars2.githubusercontent.com/u/9654?v=3&s=150 OWASP WebGoat Mailing List https://lists.owasp.org/mailman/listinfo/owasp-webgoat Owasp-webgoat-request@lists.owasp.org owasp-webgoat@lists.owasp.org http://lists.owasp.org/pipermail/owasp-webgoat/ scm:git:git@github.com:WebGoat/WebGoat.git scm:git:git@github.com:WebGoat/WebGoat.git HEAD https://github.com/WebGoat/WebGoat Github Issues https://github.com/WebGoat/WebGoat/issues 2.5.3 3.3.7 3.3.0 3.3.0 3.2.1 2.11.0 3.12.0 1.10.0 31.1-jre 0.8.10 17 2.3.1 0.9.1 0.9.3 3.5.1 1.16.1 3.8.0 2.22.0 3.1.2 3.1.1 3.1.0 3.1.0 17 17 3.15.0 UTF-8 UTF-8 3.1.1.RELEASE 5.3.2 8080 9090 2.27.2 1.2 1.4.5 1.7.0 org.ow2.asm asm 9.5 org.apache.commons commons-exec 1.3 org.asciidoctor asciidoctorj ${asciidoctorj.version} org.jsoup jsoup ${jsoup.version} com.nulab-inc zxcvbn ${zxcvbn.version} com.thoughtworks.xstream xstream ${xstream.version} cglib cglib-nodep ${cglib.version} xml-resolver xml-resolver ${xml-resolver.version} io.jsonwebtoken jjwt ${jjwt.version} com.google.guava guava ${guava.version} commons-io commons-io ${commons-io.version} org.apache.commons commons-text ${commons-text.version} org.bitbucket.b_c jose4j ${jose4j.version} org.webjars bootstrap ${bootstrap.version} org.webjars jquery ${jquery.version} com.github.tomakehurst wiremock ${wiremock.version} io.github.bonigarcia webdrivermanager ${webdriver.version} org.apache.commons commons-compress 1.22 org.jruby jruby 9.4.2.0 org.apache.commons commons-exec org.springframework.boot spring-boot-starter-validation org.projectlombok lombok provided true javax.xml.bind jaxb-api ${jaxb.version} org.springframework.boot spring-boot-starter-undertow org.springframework.boot spring-boot-starter-web org.springframework.boot spring-boot-starter-tomcat org.springframework.boot spring-boot-starter-actuator org.flywaydb flyway-core org.asciidoctor asciidoctorj org.springframework.boot spring-boot-starter-data-jpa org.springframework.boot spring-boot-starter-security org.springframework.boot spring-boot-starter-thymeleaf org.thymeleaf.extras thymeleaf-extras-springsecurity6 jakarta.servlet jakarta.servlet-api org.hsqldb hsqldb org.jsoup jsoup com.nulab-inc zxcvbn com.thoughtworks.xstream xstream cglib cglib-nodep xml-resolver xml-resolver io.jsonwebtoken jjwt com.google.guava guava commons-io commons-io org.apache.commons commons-lang3 org.apache.commons commons-text org.bitbucket.b_c jose4j org.webjars bootstrap org.webjars jquery jakarta.xml.bind jakarta.xml.bind-api com.sun.xml.bind jaxb-impl runtime org.springframework.boot spring-boot-starter-test test org.springframework.security spring-security-test test com.github.tomakehurst wiremock 3.0.0-beta-2 test io.rest-assured rest-assured test org.springframework.boot spring-boot-properties-migrator runtime false central https://repo.maven.apache.org/maven2 false central https://repo.maven.apache.org/maven2 org.springframework.boot spring-boot-maven-plugin true true org.owasp.webgoat.server.StartWebGoat org.asciidoctor asciidoctorj repackage org.codehaus.mojo build-helper-maven-plugin add-integration-test-source-as-test-sources add-test-source generate-test-sources src/it/java org.apache.maven.plugins maven-failsafe-plugin ${basedir}/src/test/resources/logback-test.xml -Xmx512m -Dwebgoatport=${webgoat.port} -Dwebwolfport=${webwolf.port} org/owasp/webgoat/*Test integration-test integration-test verify verify org.apache.maven.plugins maven-surefire-plugin ${maven-surefire-plugin.version} --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.text=ALL-UNNAMED --add-opens java.desktop/java.awt.font=ALL-UNNAMED --add-opens=java.base/sun.nio.ch=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED **/*IntegrationTest.java src/it/java org/owasp/webgoat/*Test org.apache.maven.plugins maven-checkstyle-plugin ${checkstyle.version} UTF-8 true true config/checkstyle/checkstyle.xml config/checkstyle/suppressions.xml checkstyle.suppressions.file com.diffplug.spotless spotless-maven-plugin 2.33.0 .gitignore true 4 **/*.md src/main/java/**/*.java src/test/java/**/*.java src/it/java/**/*.java true UTF-8 ${line.separator} true false true 2 false false recommended_2008_06 true true true check org.apache.maven.plugins maven-enforcer-plugin 3.3.0 restrict-log4j-versions enforce validate org.apache.logging.log4j:log4j-core true org.apache.maven.plugins maven-compiler-plugin 17 17 local-server start-server true org.codehaus.mojo build-helper-maven-plugin reserve-container-port reserve-network-port process-resources webgoat.port webwolf.port jmxPort com.bazaarvoice.maven.plugins process-exec-maven-plugin 0.9 start-jar start pre-integration-test ${project.build.directory} java -jar -Dlogging.pattern.console= -Dwebgoat.server.directory=${java.io.tmpdir}/webgoat_${webgoat.port} -Dwebgoat.user.directory=${java.io.tmpdir}/webgoat_${webgoat.port} -Dspring.main.banner-mode=off -Dwebgoat.port=${webgoat.port} -Dwebwolf.port=${webwolf.port} --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.text=ALL-UNNAMED --add-opens java.desktop/java.beans=ALL-UNNAMED --add-opens java.desktop/java.awt.font=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED ${project.build.directory}/webgoat-${project.version}.jar false http://localhost:${webgoat.port}/WebGoat/actuator/health stop-jar-process stop-all post-integration-test owasp false org.owasp dependency-check-maven 6.5.1 7 false false ${maven.multiModuleProjectDirectory}/config/dependency-check/project-suppression.xml check coverage false org.apache.maven.plugins maven-surefire-plugin ${maven-surefire-plugin.version} --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.text=ALL-UNNAMED --add-opens java.desktop/java.awt.font=ALL-UNNAMED ${surefire.jacoco.args} **/*IntegrationTest.java src/it/java org/owasp/webgoat/*Test org.jacoco jacoco-maven-plugin ${jacoco.version} before-unit-test prepare-agent ${project.build.directory}/jacoco/jacoco-ut.exec surefire.jacoco.args check check BUNDLE CLASS COVEREDCOUNT 0.6 ${project.build.directory}/jacoco/jacoco-ut.exec after-unit-test report test ${project.build.directory}/jacoco/jacoco-ut.exec ${project.reporting.outputDirectory}/jacoco-unit-test-coverage-report