119 lines
4.3 KiB
Java
119 lines
4.3 KiB
Java
/**
|
|
* ************************************************************************************************
|
|
* <p>
|
|
* <p>
|
|
* This file is part of WebGoat, an Open Web Application Security Project utility. For details,
|
|
* please see http://www.owasp.org/
|
|
* <p>
|
|
* Copyright (c) 2002 - 20014 Bruce Mayhew
|
|
* <p>
|
|
* This program is free software; you can redistribute it and/or modify it under the terms of the
|
|
* GNU General Public License as published by the Free Software Foundation; either version 2 of the
|
|
* License, or (at your option) any later version.
|
|
* <p>
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without
|
|
* even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
* <p>
|
|
* You should have received a copy of the GNU General Public License along with this program; if
|
|
* not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
|
|
* 02111-1307, USA.
|
|
* <p>
|
|
* Getting Source ==============
|
|
* <p>
|
|
* Source for this application is maintained at https://github.com/WebGoat/WebGoat, a repository for free software
|
|
* projects.
|
|
*
|
|
* @author WebGoat
|
|
* @version $Id: $Id
|
|
* @since October 28, 2003
|
|
*/
|
|
package org.owasp.webgoat;
|
|
|
|
import lombok.extern.slf4j.Slf4j;
|
|
import org.apache.catalina.Context;
|
|
import org.owasp.webgoat.plugins.PluginEndpointPublisher;
|
|
import org.owasp.webgoat.plugins.PluginsLoader;
|
|
import org.owasp.webgoat.session.Course;
|
|
import org.owasp.webgoat.session.UserSessionData;
|
|
import org.owasp.webgoat.session.WebSession;
|
|
import org.owasp.webgoat.session.WebgoatContext;
|
|
import org.springframework.beans.factory.annotation.Value;
|
|
import org.springframework.boot.SpringApplication;
|
|
import org.springframework.boot.autoconfigure.SpringBootApplication;
|
|
import org.springframework.boot.builder.SpringApplicationBuilder;
|
|
import org.springframework.boot.context.embedded.EmbeddedServletContainerFactory;
|
|
import org.springframework.boot.context.embedded.tomcat.TomcatContextCustomizer;
|
|
import org.springframework.boot.context.embedded.tomcat.TomcatEmbeddedServletContainerFactory;
|
|
import org.springframework.boot.web.support.SpringBootServletInitializer;
|
|
import org.springframework.context.ApplicationContext;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Scope;
|
|
import org.springframework.context.annotation.ScopedProxyMode;
|
|
import org.springframework.web.client.RestTemplate;
|
|
|
|
import java.io.File;
|
|
import java.util.Arrays;
|
|
|
|
@SpringBootApplication
|
|
@Slf4j
|
|
public class WebGoat extends SpringBootServletInitializer {
|
|
|
|
@Override
|
|
protected SpringApplicationBuilder configure(SpringApplicationBuilder application) {
|
|
return application.sources(WebGoat.class);
|
|
}
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
SpringApplication.run(WebGoat.class, args);
|
|
}
|
|
|
|
@Bean(name = "pluginTargetDirectory")
|
|
public File pluginTargetDirectory(@Value("${webgoat.user.directory}") final String webgoatHome) {
|
|
return new File(webgoatHome);
|
|
}
|
|
|
|
@Bean
|
|
@Scope(value = "session", proxyMode = ScopedProxyMode.TARGET_CLASS)
|
|
public WebSession webSession(WebgoatContext webgoatContext) {
|
|
return new WebSession(webgoatContext);
|
|
}
|
|
|
|
@Bean
|
|
@Scope(value = "session", proxyMode = ScopedProxyMode.TARGET_CLASS)
|
|
public UserSessionData userSessionData() {
|
|
return new UserSessionData("test", "data");
|
|
}
|
|
|
|
@Bean
|
|
public PluginEndpointPublisher pluginEndpointPublisher(ApplicationContext applicationContext) {
|
|
return new PluginEndpointPublisher(applicationContext);
|
|
}
|
|
|
|
@Bean
|
|
public Course course(PluginEndpointPublisher pluginEndpointPublisher) {
|
|
return new PluginsLoader(pluginEndpointPublisher).loadPlugins();
|
|
}
|
|
|
|
@Bean
|
|
public RestTemplate restTemplate() {
|
|
return new RestTemplate();
|
|
}
|
|
|
|
@Bean
|
|
public EmbeddedServletContainerFactory servletContainer() {
|
|
TomcatEmbeddedServletContainerFactory factory = new TomcatEmbeddedServletContainerFactory();
|
|
factory.setTomcatContextCustomizers(Arrays.asList(new CustomCustomizer()));
|
|
return factory;
|
|
}
|
|
|
|
static class CustomCustomizer implements TomcatContextCustomizer {
|
|
@Override
|
|
public void customize(Context context) {
|
|
context.setUseHttpOnly(false);
|
|
}
|
|
}
|
|
|
|
|
|
}
|