b0b94c4688
divide by zero, inaccurate discount and totals, reflection of user input git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@273 4033779f-a91e-0410-96ef-6bf7bf53c507
134 lines
3.2 KiB
Java
134 lines
3.2 KiB
Java
package org.owasp.webgoat.session;
|
|
|
|
import java.io.FileInputStream;
|
|
import java.io.IOException;
|
|
import java.util.Properties;
|
|
|
|
/*******************************************************************************
|
|
*
|
|
*
|
|
* This file is part of WebGoat, an Open Web Application Security Project
|
|
* utility. For details, please see http://www.owasp.org/
|
|
*
|
|
* Copyright (c) 2002 - 2007 Bruce Mayhew
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License as published by the Free Software
|
|
* Foundation; either version 2 of the License, or (at your option) any later
|
|
* version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
|
* FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
|
|
* details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along with
|
|
* this program; if not, write to the Free Software Foundation, Inc., 59 Temple
|
|
* Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*
|
|
* Getting Source ==============
|
|
*
|
|
* Source for this application is maintained at code.google.com, a repository
|
|
* for free software projects.
|
|
*
|
|
* For details, please see http://code.google.com/p/webgoat/
|
|
*/
|
|
public class WebgoatProperties extends Properties
|
|
{
|
|
|
|
/**
|
|
*
|
|
*/
|
|
private static final long serialVersionUID = 4351681705558227918L;
|
|
|
|
|
|
public WebgoatProperties(String propertiesFileName) throws IOException
|
|
{
|
|
try
|
|
{
|
|
FileInputStream in = new FileInputStream(propertiesFileName);
|
|
load(in);
|
|
}
|
|
catch (IOException e)
|
|
{
|
|
System.out
|
|
.println("Warning: Unable to open webgoat.properties file");
|
|
}
|
|
}
|
|
|
|
|
|
public int getIntProperty(String key, int defaultValue)
|
|
{
|
|
int value = defaultValue;
|
|
|
|
String s = getProperty(key);
|
|
if (s != null)
|
|
{
|
|
value = Integer.parseInt(s);
|
|
}
|
|
|
|
return value;
|
|
}
|
|
|
|
|
|
public boolean getBooleanProperty(String key, boolean defaultValue)
|
|
{
|
|
boolean value = defaultValue;
|
|
key = this.trimLesson(key);
|
|
|
|
String s = getProperty(key);
|
|
if (s != null)
|
|
{
|
|
if (s.equalsIgnoreCase("true"))
|
|
value = true;
|
|
else if (s.equalsIgnoreCase("yes"))
|
|
value = true;
|
|
else if (s.equalsIgnoreCase("on"))
|
|
value = true;
|
|
else if (s.equalsIgnoreCase("false"))
|
|
value = false;
|
|
else if (s.equalsIgnoreCase("no"))
|
|
value = false;
|
|
else if (s.equalsIgnoreCase("off"))
|
|
value = false;
|
|
}
|
|
|
|
return value;
|
|
}
|
|
|
|
|
|
private String trimLesson(String lesson)
|
|
{
|
|
String result = "";
|
|
|
|
if (lesson.startsWith("org.owasp.webgoat.lessons."))
|
|
{
|
|
result = lesson.substring("org.owasp.webgoat.lessons.".length(),
|
|
lesson.length());
|
|
}
|
|
else
|
|
{
|
|
result = lesson;
|
|
}
|
|
|
|
return result;
|
|
}
|
|
|
|
|
|
public static void main(String[] args)
|
|
{
|
|
WebgoatProperties properties = null;
|
|
try
|
|
{
|
|
properties = new WebgoatProperties("C:\\webgoat.properties");
|
|
}
|
|
catch (IOException e)
|
|
{
|
|
System.out.println("Error loading properties");
|
|
e.printStackTrace();
|
|
}
|
|
System.out.println(properties.getProperty("CommandInjection.category"));
|
|
}
|
|
|
|
}
|