d1e44bbc98
* better check on host and port for password reset and make context roots more flexible * spotless applied * removed hardcoded /WebGoat from js * removed hardcoded /WebGoat from js * fix spotless * fix scoreboard * upgrade WebWolf bootstrap version and icons and templates - part 1 * fixed more bootstrap 5 style issues and context path issues * organized WebSecurityConfig based on latest conventions and added basic support for oauth (more work needed) * spotless applied * added mock bean * requires updates to properties - commented for now * requires updates to properties - commented for now * oauth secrets through env values * user creation after oauth login * integration test against non default context paths * adjusted StartupMessage * add global model element username * conditionally show login oauth links * fixed WebWolf login --------- Co-authored-by: René Zubcevic <rene@Mac-mini-van-Rene.local>
116 lines
4.7 KiB
HTML
116 lines
4.7 KiB
HTML
<html xmlns:th="http://www.thymeleaf.org">
|
|
|
|
<div class="lesson-page-wrapper">
|
|
<div class="adoc-content" th:replace="~{doc:lessons/missingac/documentation/missing-function-ac-01-intro.adoc}"></div>
|
|
</div>
|
|
|
|
<div class="lesson-page-wrapper">
|
|
<link rel="stylesheet" type="text/css" th:href="@{/lesson_css/ac.css}"/>
|
|
<div class="adoc-content" th:replace="~{doc:lessons/missingac/documentation/missing-function-ac-02-client-controls.adoc}"></div>
|
|
|
|
<div class="attack-container">
|
|
<nav class="navbar navbar-default">
|
|
<div class="container-fluid">
|
|
|
|
<div class="navbar-header">
|
|
<a class="navbar-brand" href="#">WebGoat</a>
|
|
</div>
|
|
|
|
<div class="collapse navbar-collapse" id="alignment-example">
|
|
|
|
<ul class="nav navbar-nav">
|
|
<li class="dropdown">
|
|
<a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false">Account<span class="caret"></span></a>
|
|
<ul class="dropdown-menu" aria-labelledby="about-us">
|
|
<li><a href="#">My Profile</a></li>
|
|
<li><a href="#">Privacy/Security</a></li>
|
|
<li><a href="#">Log Out</a></li>
|
|
</ul>
|
|
</li>
|
|
<li class="dropdown">
|
|
<a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false">Messages<span class="caret"></span></a>
|
|
<ul class="dropdown-menu" aria-labelledby="messages">
|
|
<li><a href="#">Unread Messages (3)</a></li>
|
|
<li><a href="#">Compose Message</a></li>
|
|
</ul>
|
|
</li>
|
|
<li class="hidden-menu-item dropdown">
|
|
<a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false">Admin<span class="caret"></span></a>
|
|
<ul class="dropdown-menu" aria-labelledby="admin">
|
|
<li><a href="/access-control/users">Users</a></li>
|
|
<li><a href="/access-control/users-admin-fix">Users</a></li>
|
|
<li><a href="/access-control/config">Config</a></li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
</div>
|
|
|
|
</div>
|
|
</nav>
|
|
|
|
<br/>
|
|
|
|
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
|
|
<form class="attack-form" accept-charset="UNKNOWN"
|
|
method="POST" name="form"
|
|
action="access-control/hidden-menu">
|
|
|
|
<p>Hidden item 1 <input name="hiddenMenu1" value="" type="TEXT"/></p>
|
|
<p>Hidden item 2 <input name="hiddenMenu2" value="" type="TEXT"/></p>
|
|
<br/>
|
|
<input name="submit" value="Submit" type="SUBMIT"/>
|
|
|
|
</form>
|
|
|
|
<div class="attack-feedback"></div>
|
|
<div class="attack-output"></div>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div class="lesson-page-wrapper">
|
|
|
|
<div class="adoc-content" th:replace="~{doc:lessons/missingac/documentation/missing-function-ac-03-users.adoc}"></div>
|
|
|
|
<div class="attack-container">
|
|
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
|
|
<form class="attack-form" accept-charset="UNKNOWN"
|
|
method="POST" name="form"
|
|
action="access-control/user-hash">
|
|
|
|
<p>Your Hash: <input name="userHash" value="" type="TEXT"/></p>
|
|
<br/>
|
|
<input name="submit" value="Submit" type="SUBMIT"/>
|
|
|
|
</form>
|
|
|
|
<div class="attack-feedback"></div>
|
|
<div class="attack-output"></div>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div class="lesson-page-wrapper">
|
|
|
|
<div class="adoc-content" th:replace="~{doc:lessons/missingac/documentation/missing-function-ac-04-users-fixed.adoc}"></div>
|
|
|
|
<div class="attack-container">
|
|
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
|
|
<form class="attack-form" accept-charset="UNKNOWN"
|
|
method="POST" name="form"
|
|
action="access-control/user-hash-fix">
|
|
|
|
<p>Your Hash: <input name="userHash" value="" type="TEXT"/></p>
|
|
<br/>
|
|
<input name="submit" value="Submit" type="SUBMIT"/>
|
|
|
|
</form>
|
|
|
|
<div class="attack-feedback"></div>
|
|
<div class="attack-output"></div>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</html>
|