Commit Graph

682 Commits

Author SHA1 Message Date
Al Snow cc25ecd477 Upgraded 12 gems by rebuilding Gemfile.lock file 2015-03-15 11:36:45 -04:00
Al Snow ea588b8aa6 Upgraded 1 gem by rebuilding Gemfile.lock file 2015-03-09 10:44:05 -04:00
Al Snow 847d97657b Rebuilt Gemfile.lock file 2015-03-06 20:30:54 -05:00
Al Snow 3cb36d99d6 Rebuilt Gemfile.lock file 2015-03-02 09:33:11 -05:00
Al Snow bb6ad2bae9 Fixed Gemfile.lock file merge conflict 2015-02-26 09:39:48 -05:00
Al Snow 9e7eb02cde Merge branch 'master' of https://github.com/OWASP/railsgoat
Conflicts:
	Gemfile.lock
2015-02-26 09:13:15 -05:00
Mike McCabe b2c8e6cf8d Merge branch 'master' of github.com:OWASP/railsgoat 2015-02-23 21:30:37 -05:00
Mike McCabe d1c7b0831d adding vulnerable gem 2015-02-23 21:29:44 -05:00
Mike McCabe 1eee953f62 adding render vuln 2015-02-23 20:36:53 -05:00
Al Snow 716a16d514 Modified Gemfile; Rebuilt Gemfile.lock file 2015-02-09 11:29:47 -05:00
cktricky 3d29293bd4 pry instead of rails c 2015-02-08 18:10:27 -05:00
Al Snow 7ae98b769b Rebuilt Gemfile.lock file 2015-01-31 18:34:48 -05:00
Al Snow ca0526ccc9 Upgraded to Rails 4.0.13; Rebuilt Gemfile.lock file 2015-01-10 09:45:51 -05:00
cktricky 907045488d this change allows the app to get the csrf fixes working when running rake training 2015-01-09 11:40:37 -05:00
cktricky e9f66b8694 deleted unnecessary file 2015-01-06 13:44:58 -05:00
chrismo 73e8ab972b assign_user_id and UserFixture password fixes.
When the database is empty, which can happen in the test database and in
the dev database if the seeds.rb aren't applied, the assign_user_id
method would not assign an id and the newer before_filter block to
generate_token would fail.

UserFixture had a password on it that wouldn't pass the new validation
rules once that vulnerability is patched.
2015-01-06 13:21:45 -05:00
cktricky c39b0c35fd resolves issue #180 2015-01-06 13:14:53 -05:00
Al Snow 38b1391b2b Upgraded 2 gems by rebuilding Gemfile.lock file 2014-12-30 14:37:00 -05:00
Al Snow 1afe646627 Upgraded rails to 4.0.12 2014-12-28 17:30:16 -05:00
Al Snow a0330cd323 Merge branch 'rails4' 2014-12-28 17:23:08 -05:00
Al Snow 80e1ede02b Added Fred's Strong Parameter work 2014-12-28 17:20:39 -05:00
Al Snow ea6344a324 Merge branch 'strong-params' of https://github.com/jfnixon/railsgoat into jfnixon-strong-params 2014-12-28 17:06:29 -05:00
Al Snow feb51d077c Add changes 2014-12-28 17:05:46 -05:00
Al Snow 77f9150387 Merge branch 'master' of https://github.com/OWASP/railsgoat 2014-12-28 16:25:33 -05:00
Al Snow 47ba36504f Upgraded 2 gems by rebuilding Gemfile.lock file 2014-12-23 13:56:33 -05:00
Ken Johnson 975002ea76 Merge pull request #177 from jasnow/master
Upgraded 22 gems by rebuilding Gemfile.lock file
2014-12-23 08:06:49 -05:00
Al Snow 400aaa5d1c Upgraded 7 gems by rebuilding Gemfile.lock file 2014-12-22 14:49:26 -05:00
Al Snow ecd14e61d4 Upgraded 1 gem by rebuilding Gemfile.lock file 2014-12-14 10:46:29 -05:00
Al Snow 707be5f80c Upgraded 14 gems by rebuilding Gemfile.lock file 2014-12-13 21:42:35 -05:00
Fred Nixon 41d4690547 Merge branch 'strong-params' of github.com:jfnixon/railsgoat into strong-params
Somehow I wound up a commit behind. Catch up.
2014-12-05 15:06:57 -05:00
Fred Nixon ea8e9901f4 On branch strong-params
Your branch is behind 'origin/strong-params' by 1 commit, and can be fast-forwarded.

I'll pull to catch up after this commit
Change code to whitelist params
Remove attr_accessible lines
Add strong_params to Gemfile, since this branch is still on Rails 3
Mixin to ActiveRecord::Base ActiveModel::ForbiddenAttributesProtection
Use an initializer for the mixin
2014-12-05 15:04:01 -05:00
Al Snow 415229c1d3 Upgrade Rails to 3.2.21 2014-11-19 12:28:33 -05:00
Al Snow b4a1ad46c4 Upgraded Ruby to 2.1.5; Rebuilt Gemfile.lock file 2014-11-17 17:17:01 -05:00
Ken Johnson e81bc257be Merge pull request #173 from jasnow/master
Upgraded 7 gems by rebuilding Gemfile.lock file
2014-11-17 08:12:53 -05:00
Al Snow 9fd0ef0c31 Upgraded 3 gems by rebuilding Gemfile.lock file 2014-11-10 13:38:57 -05:00
Al Snow e1c5606752 Upgraded 3 gems by rebuilding Gemfile.lock file 2014-11-03 09:07:03 -05:00
Al Snow 7f8d7b6adb Upgraded 1 gem by rebuilding Gemfile.lock file 2014-10-31 14:57:06 -04:00
Al Snow 33a5695d71 Upgraded to Rails 3.2.20; Rebuilt Gemfile.lock file 2014-10-30 21:26:36 -04:00
Al Snow 87fed3a305 Rebuilt Gemfile.lock file; Fixed Time.now issue 2014-10-28 13:45:12 -04:00
Al Snow adc8290df8 Upgraded 3 gems by rebuilding Gemfile.lock file 2014-10-24 10:57:11 -04:00
cktricky d6f5d38f77 removing the send tutorial for now 2014-10-23 16:41:54 -05:00
Ken Johnson 5ed0805493 Merge pull request #168 from jasnow/master
Upgraded 4 gems by rebuilding Gemfile.lock file
2014-10-21 15:19:00 -04:00
Al Snow e2d4c0574c Upgraded 4 gems by rebuilding Gemfile.lock file 2014-10-19 11:37:38 -04:00
cktricky 3e36576477 Merge branch 'pr-160' 2014-10-14 16:37:45 -04:00
cktricky eb08a33eb3 Merge branch 'master' of github.com:OWASP/railsgoat 2014-10-14 16:21:44 -04:00
jackMannino 9eb2d9dd91 added vagrant files to gitignore 2014-10-14 16:21:36 -04:00
jackMannino 10b532d4d6 this should resolve issue #162 2014-10-14 16:20:22 -04:00
Al Snow caa16764e5 Upgraded 3 gems by rebuilding Gemfile.lock file 2014-10-14 14:23:25 -04:00
Al Snow 5c13d47887 Merge branch 'master' into rails4 2014-10-10 15:38:43 -04:00
Al Snow 789ccff349 Upgraded 2 gems by rebuilding Gemfile.lock file; Fixed find/first dep warning #158 2014-10-10 15:38:00 -04:00