/*************************************************************************************************** * * * This file is part of WebGoat, an Open Web Application Security Project utility. For details, * please see http://www.owasp.org/ * * Copyright (c) 2002 - 2007 Bruce Mayhew * * This program is free software; you can redistribute it and/or modify it under the terms of the * GNU General Public License as published by the Free Software Foundation; either version 2 of the * License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without * even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * General Public License for more details. * * You should have received a copy of the GNU General Public License along with this program; if * not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA * 02111-1307, USA. * * Getting Source ============== * * Source for this application is maintained at code.google.com, a repository for free software * projects. * * For details, please see http://code.google.com/p/webgoat/ */ package org.owasp.webgoat.service; import java.util.ArrayList; import java.util.List; import javax.servlet.http.HttpSession; import org.owasp.webgoat.lessons.AbstractLesson; import org.owasp.webgoat.lessons.Category; import org.owasp.webgoat.lessons.RandomLessonAdapter; import org.owasp.webgoat.lessons.model.LessonMenuItem; import org.owasp.webgoat.lessons.model.LessonMenuItemType; import org.owasp.webgoat.session.Course; import org.owasp.webgoat.session.WebSession; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.ResponseBody; /** * * @author rlawson */ @Controller public class LessonMenuService extends BaseService { /** * Returns the lesson menu which is used to build the left nav * * @param session * @return */ @RequestMapping(value = "/lessonmenu.mvc", produces = "application/json") public @ResponseBody List showLeftNav(HttpSession session) { List menu = new ArrayList(); WebSession ws = getWebSesion(session); // Get the categories, these are the main menu items Course course = ((Course) session.getAttribute("course")); List categories = course.getCategories(); for (Category category : categories) { LessonMenuItem categoryItem = new LessonMenuItem(); categoryItem.setName(category.getName()); categoryItem.setType(LessonMenuItemType.CATEGORY); // check for any lessons for this category List lessons = ws.getLessons(category); for (AbstractLesson lesson : lessons) { LessonMenuItem lessonItem = new LessonMenuItem(); lessonItem.setName(lesson.getTitle()); lessonItem.setLink(lesson.getLink()); lessonItem.setType(LessonMenuItemType.LESSON); if (lesson.isCompleted(ws)) { lessonItem.setComplete(true); } categoryItem.addChild(lessonItem); // Does the lesson have stages if (lesson instanceof RandomLessonAdapter) { RandomLessonAdapter rla = (RandomLessonAdapter) lesson; String[] stages = rla.getStages(); if (stages != null) { String lessonLink = lesson.getLink(); int stageIdx = 1; for (String stage : stages) { LessonMenuItem stageItem = new LessonMenuItem(); stageItem.setName("Stage " + stageIdx + ": " + stage); // build the link for the stage String stageLink = lessonLink + "&stage=" + stageIdx; stageItem.setLink(stageLink); stageItem.setType(LessonMenuItemType.STAGE); if (rla.isStageComplete(ws, stage)) { stageItem.setComplete(true); } lessonItem.addChild(stageItem); stageIdx++; } } } } menu.add(categoryItem); } return menu; } }