Commit Graph

55 Commits

Author SHA1 Message Date
Ken Johnson 1bd6ee3a0e Upgrade Ruby from 3.3.6 to 3.4.1
Updated Ruby to the latest stable 3.4.x release for improved performance
and security updates.

Changes:
- Updated .ruby-version to 3.4.1
- Updated Gemfile ruby version requirement to 3.4.1
- Updated README.md to reflect Ruby 3.4.1 requirement
- Updated Dockerfile from ruby:2.6.5 to ruby:3.4.1
- Removed outdated bundler version constraint in Dockerfile

Tested:
- Bundle install successful with Ruby 3.4.1
- Test suite runs successfully (46 examples, 1 pre-existing failure)
- Rails server starts and responds correctly

Fixes #490

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-05 11:51:05 -05:00
Ken Johnson 3adfb4f973 Replace vulnerability list with link to wiki as source of truth
Instead of maintaining a duplicate list of vulnerabilities in the README,
point users to the wiki where the complete and authoritative list exists
with full tutorials and explanations.

This keeps the wiki as the single source of truth for vulnerability
documentation while still giving README readers a high-level overview.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-04 17:51:57 -05:00
Ken Johnson e148a03142 Remove OWASP badge from README
Removed OWASP badge from README.
2026-01-04 17:48:06 -05:00
Ken Johnson 41fcc1ac75 Modernize and restructure README for better clarity and accuracy
This comprehensive README update improves the documentation structure,
updates outdated information, and provides a clearer learning path for users.

Key improvements:
- Added OWASP Flagship badge and clearer project description
- Created "What is RailsGoat?" section explaining the educational purpose
- Added comprehensive "Vulnerabilities Included" section listing all 11+ vulnerabilities
- Restructured "Quick Start" with numbered steps and clearer prerequisites
- Added "Learning Path" section with 3-step approach (tests → explore → wiki)
- Updated all outdated technical information:
  * Rails 8.0 with Ruby 3.3.6 (was "3 to 6")
  * Removed references to deprecated Thin, PhantomJS, and Poltergeist
  * Updated Docker instructions (removed outdated docker-machine references)
  * Corrected Rails version branches (added rails_5, updated main to Rails 8)
- Reorganized content flow: what → why → how → learn → advanced → contribute
- Moved "Support" to bottom with expanded help resources
- Simplified Docker and MySQL sections under "Advanced Configuration"
- Added security warning footer about not deploying publicly
- Improved formatting with bold headings and better code block examples

The new structure guides users from understanding what RailsGoat is,
through installation, to actively learning from the vulnerabilities.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-04 17:44:44 -05:00
Ken Johnson 65e42ceee3 Remove Travis CI badge and improve dropdown selection handling
1. Removed broken Travis CI build status badge from README header

2. Enhanced dropdown selection on messages page:
   - Added explicit JavaScript change event handler
   - Added CSS to ensure proper text color and background
   - Added blur/focus to force visual update after selection
   - Added console logging for debugging

This should resolve the issue where selected recipient names weren't
displaying properly in the dropdown after selection.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-09 14:59:07 +00:00
Ken Johnson fe53d38da0 Remove broken CodeClimate badge from README
Removed the CodeClimate badge link from the README header as the
CodeClimate links are no longer functional.

Kept the Build Status badge from Travis CI.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-09 14:50:25 +00:00
horvatic 3ebae3dd03 add setup for mac apple silicon 2022-03-15 20:11:46 +00:00
Al Snow 23d145129d Upgraded Ruby to 2.7.0-preview1 and Rails to 6.0.0 - fixed 1 spec 2019-09-09 15:13:29 -04:00
Al Snow 8c4b05a2b2 Removed 'Rails, ' from new wording 2018-03-15 09:38:12 -04:00
Al Snow 2d65705412 Updated Rails stack setup instructions 2018-03-13 10:32:36 -04:00
Ken Johnson 0766ca80bf updated to point to the contribution document. 2018-03-03 11:46:48 -05:00
Al Snow 68f1ad7185 Upgraded Ruby to 2.5.0 2018-02-25 15:52:21 -05:00
Al Snow 86f32cde66 Upgraded ffi gem + changed license text to link in README file 2018-02-25 09:09:12 -05:00
Al Snow d2788b3ad5 Merge branch 'master' of https://github.com/OWASP/railsgoat 2018-01-04 11:48:36 -05:00
Al Snow dbc67baf53 Upgraded Ruby to 2.4.3 2017-12-14 19:01:55 -05:00
Joseph Mastey 89ce39ae53 fix README to reflect proper operation of the vuln specs 2017-12-13 08:34:12 -06:00
mccabe615 cc53212a68 updating readme 2017-11-13 15:13:37 -05:00
Al Snow 20635993c8 Upgraded Ruby to 2.4.2, fixed OpenSSL warnings, and 3 gems 2017-09-25 12:58:06 -04:00
Al Snow 367800e9af Upgraded to ruby 2.3.5 2017-09-17 12:40:36 -04:00
nVisium-ken-johnson 386a526742 merged @jmmasteys rails_5 branch 2017-07-12 10:24:04 -04:00
Al Snow 28b56965f6 Upgrade addressable gem and Ruby 2.3.4 2017-03-30 08:23:52 -04:00
Joseph Mastey 8c38edd90b upgrade(rails-5): we updated the db/config, broke the test that extracts it 2017-01-19 15:53:24 -06:00
Joseph Mastey 54b8c291ea upgrade(rails 5): no longer use rake to invoke rake tasks, use rails
though I left the case alone where the command would previously been
just `bundle exec rake`, as doing the same doesn't work for rails.
2017-01-19 13:59:40 -06:00
Al Snow 3e1e5aebe9 Added phantomjs version to README 2016-12-10 12:05:11 -05:00
Al Snow 08c6a3ad22 Upgraded ruby to 2.3.3 2016-11-22 11:32:05 -05:00
Al Snow a274d71360 Upgraded Ruby versions in config/doc files 2016-11-16 08:01:23 -05:00
Mike McCabe a3c0cf7948 Update README.md 2016-08-28 23:23:43 -04:00
Mike McCabe fc120ba186 Minor update about docker IP 2016-08-28 23:10:33 -04:00
Jayson Grace 43beb7a752 Updated documentation to include steps to run RailsGoat on Docker 2016-08-28 13:05:00 -06:00
godinezj 0c54b258dd Updated README to match Gemfile 2016-06-22 10:26:25 -07:00
cktricky b70206ab4f updated our support message in the readme so that folks know to visit slack for real-time-"ish" assistance 2016-02-16 10:47:08 -08:00
cktricky d8f9ba6eef updated to reflect the rails 3 deprecation 2015-08-18 21:29:39 -04:00
Tom Copeland b9dd1a6e3d Add a docs note about running just one spec 2015-04-29 10:18:32 -04:00
Mike McCabe 1466c69616 Update README.md 2014-09-21 14:34:00 -04:00
mccabe615 95c36fb6bd Updating README.md with MySQL info 2014-08-25 11:38:28 -04:00
James Espinosa 70c9c9942b Update LICENSE year in README file 2014-07-02 22:54:00 -05:00
James Espinosa e89ab2ca1b Update README file information 2014-07-02 22:16:29 -05:00
Al Snow 1bea104205 New 2.1.2 branch changes for Ruby 2.1.2 upgrade 2014-06-25 13:04:14 -04:00
Al Snow 84a8ad5b39 Merged master into branch/clean it up/green test run 2014-04-03 21:00:58 -04:00
mccabe615 ad4f982992 Update README.md 2013-12-27 15:47:41 -05:00
James Espinosa 76bf8fa45d Update README to include MailCatcher notes 2013-12-10 22:35:42 -06:00
James Espinosa 69078aa404 Add minor text and typo changes 2013-11-14 15:04:45 -06:00
James Espinosa 64bdc00161 Add minor changes to README.md file 2013-11-14 15:04:45 -06:00
Al Snow 94d4410528 1. Changed 1.9.3 to 2.0.0 in .rvmrc, .travis.yml, Gemfile, README.md.
2. Rebuilt Gemfile.lock file.
3. Changed "@@" (class var) to "$" (global var) in spec/support/capybara_shared.rb
2013-10-28 19:32:59 -04:00
cktricky acf3b533bd fixing travis ci build icon 2013-10-27 22:43:10 -04:00
mccabe615 79915519b1 Update README.md 2013-10-09 13:25:54 -04:00
mccabe615 829b566c29 Update README.md 2013-10-07 15:23:37 -04:00
mccabe615 30f432e8a0 Update README.md 2013-10-07 15:23:37 -04:00
chrismo e71834b830 Additions to README 2013-10-07 10:21:33 -05:00
mccabe615 5123d8ba77 Update README.md 2013-09-06 16:03:09 -04:00