Comments (11)
Working on this, created a new endpoint for reloading plugins. We need to decide how we integrate this within the GUI:
- Button?
- Do we want to reload all the lessons or reload a specific lesson?
from webgoat.
As discussed on the slack channel: we will reload all plugins, and make it available with reload=true url parameter or just a WebGoat/…/reload. We can wire it up later.
from webgoat.
You can now reload plugins with a call to a separate endpoint this endpoint. We can integrate this in the UI with a button in a later version
from webgoat.
I am not aware of any "developer controls" where such a button would be suitable in webgoat at the moment, is there one? If not, perhaps it could be useful to have some kind of "Developer Controls/Dashboard" that could be toggled on/off.
Such controls could be buttons/links to performing actions like reloading plugins and details about what is going on in the system. Here is a quick mock of what it could look like:
The concept can easily be extended to allow more controls like selecting which plugin to reload or any other system action the developer might want to perform (clearing cookies, checking state, etc.).
from webgoat.
@span: you can also add #96 which was added to highlight the text on a page in order to show which one is already in the i18n bundle
from webgoat.
Sounds good to me. I can put something together unless @mayhew64 has already started on this or has other ideas?
from webgoat.
I have not started anything on the highlighting. Feel free to put something together.
from webgoat.
Just wanted to let you know I have picked up work on this again and hope to have something after this week (which is way to busy).
from webgoat.
So I have most of the wiring in place now but I would like #218 to be fixed so see if re-routing to start.mvc
is a good alternative to refresing the tab after reloading plugins and labels.
Ideally I suppose re-routing to whatever page the user was on when clicking reload
would be great but that requires #194 to be in place.
from webgoat.
I am currently struggling to get the reload of the lessons to actually work. The output from the tomcat is claiming everything is reloaded but I don't see any GUI updates nor updates on for example cookie name in the "spoof auth cookie" lesson.
Will keep investigating what is going on here.
from webgoat.
Closing, since the release of version 8.0 we no longer actively support version 7.1.
from webgoat.
Related Issues (20)
- Create more structure within the lessons/menu by introducing personas
- WebWolf: add access log link to `/files` endpoint
- Command injection lesson HOT 5
- icon image is not upto date. HOT 3
- Request processing failed; nested exception is java.lang.NullPointerException: Cannot invoke "Object.equals(Object)" because the return value of "org.owasp.webgoat.container.session.UserSessionData.getValue(String)" is null HOT 1
- WebWolf: Make webjar dependencies version agnostic
- Incorrect localization files in XSS lesson
- Fix the Stored Cross-Site Scripting Lesson
- Fix the Mitigation Cross-Site Scripting Lesson
- Deprecated attribute in Thymeleaf - HijackSession Lesson
- Some links in the Crypto Basics lesson are not working
- fix: lessons containing links with trailing slash are not functioning correctly
- GMAILK HOT 1
- The task is not executable between now and the next ten minutes, so the action will be ignored. Maybe you copied an old solution? Let's try again. HOT 2
- Update State of the Software Supply Chain links HOT 3
- accesing the webgoat HOT 2
- Insecure deserialization time zone issue HOT 3
- Registration HOT 5
- some links show incorrect hostname or context path
- Fix layout of WebWolf
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from webgoat.