 cktricky
|
890717b7ea
|
write-up complete for exposure
|
2013-11-14 10:10:58 -05:00 |
|
|
cktricky
|
e764efe1d4
|
working on A6 tutorial write-up now that the code is working
|
2013-11-14 09:39:57 -05:00 |
|
|
cktricky
|
98678b0364
|
Merge branch 'top-10-2013' of github.com:OWASP/railsgoat into top-10-2013
|
2013-11-13 19:51:59 -05:00 |
|
|
cktricky
|
b605a42812
|
got the code kicked off so we can encrypt SSN(s) in the database
|
2013-11-13 19:51:42 -05:00 |
|
|
Mike McCabe
|
235b6418d0
|
A7 adding before filter to see if admin or admin_id is 1
|
2013-11-13 19:35:12 -05:00 |
|
|
Mike McCabe
|
aeabbcf8c6
|
A7 - switching the var used in the view so that non-admins can view the admin panel
|
2013-11-13 19:14:12 -05:00 |
|
|
cktricky
|
4be667b606
|
working
|
2013-11-13 19:02:37 -05:00 |
|
|
cktricky
|
447c408699
|
Merge branch 'top-10-2013' of github.com:OWASP/railsgoat into top-10-2013
|
2013-11-13 18:24:33 -05:00 |
|
|
cktricky
|
efcb7b8c4b
|
working on encryption
|
2013-11-13 18:24:26 -05:00 |
|
|
Mike McCabe
|
af8776a3ea
|
halfway done A7
|
2013-11-13 18:23:38 -05:00 |
|
|
Mike McCabe
|
91e6797b40
|
adding broken functionality for A7
|
2013-11-13 18:23:38 -05:00 |
|
|
cktricky
|
d9956caec1
|
removed orig file
|
2013-11-13 14:18:25 -05:00 |
|
|
cktricky
|
665ccb2167
|
removed orig file and also began encryption related stuff for ssn(s)
|
2013-11-13 14:01:29 -05:00 |
|
|
cktricky
|
8c672fd2fc
|
fixed the route
|
2013-11-13 12:16:48 -05:00 |
|
|
Mike McCabe
|
f0ca17df79
|
updating the information for A9 fixes #27
|
2013-11-13 11:47:29 -05:00 |
|
|
Mike McCabe
|
fe9d8b266f
|
adding security misconfig text
|
2013-11-12 18:55:14 -05:00 |
|
|
cktricky
|
6950accce4
|
a6 exposure, working on the wording for SSNs being stored in the clear
|
2013-11-12 17:44:27 -05:00 |
|
|
cktricky
|
655b636c38
|
Merge branch 'top-10-2013' of github.com:OWASP/railsgoat into top-10-2013
|
2013-11-12 16:12:49 -05:00 |
|
|
Mike McCabe
|
c06140659c
|
updated description with owasp one
|
2013-11-12 16:10:38 -05:00 |
|
|
cktricky
|
14bff998dd
|
Merge branch 'master' of github.com:OWASP/railsgoat into top-10-2013
|
2013-11-12 16:07:23 -05:00 |
|
|
Michael McCabe
|
7833b85837
|
updating description with owasp 2013 description
|
2013-11-12 15:24:07 -05:00 |
|
|
Michael McCabe
|
cf1b5dc124
|
updating description with owasp 2013 description
|
2013-11-12 13:55:24 -05:00 |
|
|
GSMcNamara
|
09c0f07d8b
|
Lowercased a letter.
|
2013-11-07 15:06:05 -05:00 |
|
|
GSMcNamara
|
7ddec28bcc
|
Removed apostrophe
|
2013-11-07 15:02:31 -05:00 |
|
|
GSMcNamara
|
813711d79e
|
Grammar fix.
|
2013-11-07 14:56:18 -05:00 |
|
|
cktricky
|
1e93dc3d4d
|
appears to have solved the issue with our code printing stderrs
|
2013-10-27 22:38:52 -04:00 |
|
|
cktricky
|
86035a1cbd
|
appears to have solved the issue with our code printing stderrs
|
2013-10-27 22:38:38 -04:00 |
|
|
cktricky
|
11480ac853
|
tests are working again, I will work on surpressing the errors. Also merged @jasnow work
|
2013-10-27 21:46:12 -04:00 |
|
|
cktricky
|
6d1c0c7869
|
merging
|
2013-10-27 20:17:52 -04:00 |
|
|
cktricky
|
7c1d52320a
|
does not fix the error that occurs (as it should, but that we want to obfuscate) when a command is injected into, however, it does pass the build and does not break the entire call
|
2013-10-23 17:11:28 -05:00 |
|
|
cktricky
|
c6e42901c7
|
fixing a mistake
|
2013-10-22 10:38:23 -04:00 |
|
|
cktricky
|
1817251af5
|
changes
|
2013-10-22 10:38:00 -04:00 |
|
|
Mike McCabe
|
3820b78066
|
fixing this function that was not explicitly using the params
|
2013-10-22 10:16:09 -04:00 |
|
|
cktricky
|
b7c3b04c74
|
this seems to have fixed a nuisance error within our unit-tests. Issue #57
|
2013-10-22 00:58:48 -04:00 |
|
|
cktricky
|
753840a276
|
this seems to have fixed a nuisance error within our unit-tests. Issue #57
|
2013-10-22 00:57:32 -04:00 |
|
|
cktricky
|
64f2ad9f9e
|
very minor sidebar change
|
2013-10-14 08:46:21 -04:00 |
|
|
cktricky
|
f9bbbe0a54
|
oops
|
2013-10-14 08:44:09 -04:00 |
|
|
cktricky
|
6897996394
|
merged
|
2013-10-14 08:42:27 -04:00 |
|
|
cktricky
|
940181f397
|
merged some content
|
2013-10-14 08:39:20 -04:00 |
|
|
cktricky
|
d2bc7d740a
|
minor fix
|
2013-10-14 08:36:52 -04:00 |
|
|
cktricky
|
a65a20a647
|
Merge branch 'master' of github.com:OWASP/railsgoat into top-10-2013
|
2013-10-14 08:29:39 -04:00 |
|
|
cktricky
|
f02895351d
|
removed a bit of cruft, also activated the sidebar item when working within the messages section
|
2013-10-13 23:17:18 -04:00 |
|
|
cktricky
|
7a101a9bb5
|
fix for issue #44
|
2013-10-13 21:50:25 -04:00 |
|
|
cktricky
|
16bd465633
|
this appears to fix the problem with our accordion not working correctly. I couldnt find a reason to use bootstrap.js anyways.
|
2013-10-13 21:50:25 -04:00 |
|
|
Mike McCabe
|
8c17a3df0e
|
adding messaging function, needs tests...
|
2013-10-13 21:49:17 -04:00 |
|
|
Mike McCabe
|
8686f6b9d3
|
adding messages mvc to allow users to send messages.
|
2013-10-11 16:03:37 -04:00 |
|
|
Mike McCabe
|
dbd0c2548d
|
making full_name method public
|
2013-10-11 16:03:37 -04:00 |
|
|
cktricky
|
e2c4fb4bd8
|
change to the user model based on a merge with master. Master is the correct code
|
2013-10-11 12:04:19 -04:00 |
|
|
Mike McCabe
|
bbed455178
|
verifying user exists before trying to update
|
2013-10-09 11:08:39 -04:00 |
|
|
Mike McCabe
|
73f3272aa1
|
adding flash message with validation errors, and redirect to sign_up
|
2013-10-07 15:23:37 -04:00 |
|