Commit Graph

519 Commits

Author SHA1 Message Date
cktricky 8ed2714f3f changed constantize to metaprogramming for the addition of tutorials specific to metaprogramming flaws. In addition, the messages portion of the app needed some generic TLC so I have removed the "new" view in order to bring that functionality into the seed message page/view. 2014-05-20 14:25:45 -04:00
Ken Johnson e4283be96b Merge pull request #120 from jasnow/master
Upgraded 1 gem by rebuilding Gemfile.lock file
2014-05-19 08:55:32 -04:00
cktricky 2ef2209f70 resolves issue #121 by saving JSAPI and HTML5 shim locally within Railsgoat 2014-05-19 08:54:58 -04:00
Al Snow 3213ad7716 Rebuilt Gemfile.lock file 2014-05-18 13:08:26 -04:00
Ken Johnson 684ff98583 Merge pull request #119 from jasnow/master
Rebuilt Gemfile.lock file (5 gems).
2014-05-17 14:12:05 -04:00
Al Snow 501d24c464 Rebuilt Gemfile.lock file 2014-05-15 23:25:54 -04:00
Ken Johnson 7d0f597610 Merge pull request #118 from jasnow/master
Upgraded 3 gems by rebuilding Gemfile.lock file
2014-05-13 12:16:10 -04:00
Al Snow 3409219f4d Upgraded 3 gems by rebuilding Gemfile.lock file 2014-05-09 16:31:10 -04:00
Ken Johnson 4ea2552b63 Merge pull request #117 from jasnow/master
Upgraded 1 gem by rebuilding Gemfile.lock file
2014-05-07 12:23:20 -04:00
Al Snow 002c82547f Rebuilt Gemfile.lock file 2014-05-06 13:47:21 -04:00
Ken Johnson 302fdd0c96 Merge pull request #116 from jasnow/master
Upgraded 2 gems by rebuilding Gemfile.lock file
2014-05-05 09:54:47 -04:00
Al Snow f1c047a0e8 Upgraded 2 gems buy rebuilding Gemfile.lock file 2014-05-05 08:28:08 -04:00
Ken Johnson ce827c43cc Merge pull request #115 from jasnow/master
Upgraded 1 gem by rebuilding Gemfile.lock file
2014-05-05 05:36:22 -04:00
Al Snow e1c1588149 Upgraded 1 gem by rebuilding Gemfile.lock file 2014-05-02 13:04:19 -04:00
Ken Johnson 3b330ba348 Merge pull request #114 from jasnow/master
Updated 5 gems by rebuilding Gemfile.lock file
2014-04-28 09:37:37 -04:00
Al Snow 986105e911 Rebuilt Gemfile.lock file 2014-04-28 09:35:27 -04:00
Al Snow bdbe4b1221 Rebuilt Gemfile.lock file 2014-04-24 09:08:52 -04:00
Al Snow 813eb6eb9b Merge branch 'master' of https://github.com/OWASP/railsgoat 2014-04-24 09:03:39 -04:00
Al Snow ded0406cf8 Upgraded 2 gems by rebuilding Gemfile.lock file 2014-04-21 14:26:02 -04:00
mccabe615 e8e46ca336 Merge pull request #111 from jasnow/master
Changed bcrypt-ruby to bcrypt gem (name change; remove warning) + Rebuilt Gemfile.lock file
2014-04-20 20:37:25 -04:00
Al Snow 65a0f3e188 Changed bcrypt-ruby to bcrypt gem (name change; remove warning); Rebuilt Gemfile.lock file 2014-04-18 16:19:42 -04:00
cktricky 4af22d952d fixed broken spec test 2014-04-18 09:25:07 -04:00
cktricky bc95b27edb Merge branch 'master' of github.com:OWASP/railsgoat into pr-109 2014-04-18 09:18:57 -04:00
Mike McCabe fceeb94b05 adding mysql env to bundler require 2014-04-17 23:08:55 -04:00
Mike McCabe c0ea2c87a5 adding mysql environment for mysql sql injection tests 2014-04-17 23:03:46 -04:00
cktricky 5441fea5a6 Merge branch 'master' of github.com:OWASP/railsgoat into pr-108 2014-04-17 22:51:19 -04:00
cktricky d2bd77a461 the latest sqli tutorial leveraging @forced_request modifications. We really need some more unit-tests for all this new functionality 2014-04-17 22:07:58 -04:00
cktricky 77fcf26abd working on a tutorial for the scope injection / sql injection 2014-04-17 20:51:16 -04:00
Mike McCabe 6975f94381 adding routes. catching nulls 2014-04-17 20:18:39 -04:00
cktricky c157496b1e fixed broken spec test by changing the reference to an incorrect location when downloading the database.yml file 2014-04-17 20:17:33 -04:00
John Poulin 4bff205e81 added in johns constantize change as well as some other stuff like CSS fun 2014-04-17 20:10:53 -04:00
John Poulin 5bb9c75f06 Added fix for Analytics SQLi 2014-04-17 20:05:07 -04:00
John Poulin 196b732b91 Fixed bug in analytics view 2014-04-17 20:04:32 -04:00
John Poulin 3f63480022 Added Analytics function to track user hits by ip address, referrer and user agent 2014-04-17 20:03:50 -04:00
John Poulin 5056f77395 Added codefix example for CSS context XSS. 2014-04-17 20:03:17 -04:00
John Poulin e760fc0087 merging 2014-04-17 20:03:14 -04:00
Mike McCabe 9fd91a8224 initial commit of mobile controller 2014-04-17 20:00:30 -04:00
Mike McCabe 833cdaeff9 adding .tags to gitignore 2014-04-17 20:00:18 -04:00
Mike McCabe 8bc20e8f91 fixing name in messages 2014-04-17 19:56:48 -04:00
cktricky 8e4e084dc9 Fixes #99. We have added the hogan method for escaping user input and added a tutorial 2014-04-17 12:51:02 -04:00
cktricky 8cb6ff36ac removed needless diff stuff 2014-04-17 11:37:02 -04:00
cktricky 366edc3b09 not sure if this is working 2014-04-17 11:33:18 -04:00
Al Snow 430cac2f64 Upgraded 2 gems by rebuilding Gemfile.lock file 2014-04-17 09:58:58 -04:00
cktricky c7cd7c4272 Fixes #100. Added some verbiage that makes it clearer that a user should click on the PDF(s) 2014-04-17 08:43:29 -04:00
cktricky d8badd0911 Merge branch 'pr-106' 2014-04-17 08:15:31 -04:00
cktricky d4c882a1c7 Fixes #107. Added some verbiage surrounding the SQL Injection tutorial 2014-04-17 08:09:02 -04:00
cktricky d275589f05 Merge branch 'master' of github.com:OWASP/railsgoat 2014-04-16 14:42:33 -04:00
cktricky 8febd39252 hopefully nothing changed 2014-04-16 14:40:30 -04:00
Al Snow 7f89ffc65a Rebuilt Gemfile.lock file and upgraded 3 gems 2014-04-08 19:57:10 -04:00
mccabe615 12a0e578f2 Merge pull request #62 from jasnow/2.0.0
Upgraded Project to Ruby 2.0.0 Branch.
2014-04-05 12:24:46 -04:00