cktricky 2f5dbb7d82 Merge branch 'metaprogramming'

2014-05-22 15:39:39 -06:00

..

access_control

small update to A7

2013-11-14 11:24:15 -05:00

broken_auth_sess

updated tutorial to reflect changes to the correct code listed within the user model

2014-03-09 20:16:54 -04:00

credentials

changed motorcross to motocross everywhere that it used. Closes or resolves issue #104

2014-03-26 12:58:48 -04:00

csrf

fixed category number and this closes issue #35

2013-11-14 10:52:04 -05:00

exposure

added the verbose model attributes finding under the exposure section within the tutorials

2014-03-12 20:28:59 -04:00

injection

the latest sqli tutorial leveraging @forced_request modifications. We really need some more unit-tests for all this new functionality

2014-04-17 22:07:58 -04:00

insecure_components

everything checks out re: unit tests. Additionally, this closes issue #112 (seriously, are we up to 112 issues already?)

2014-05-22 10:56:29 -06:00

insecure_dor

updated description with owasp one

2013-11-12 16:10:38 -05:00

logic_flaws

added the tutorial for the newest logic flaw

2014-03-16 22:10:19 -04:00

mass_assignment

this closes issue #9

2013-06-02 20:19:31 -04:00

metaprogramming

changed constantize to metaprogramming for the addition of tutorials specific to metaprogramming flaws. In addition, the messages portion of the app needed some generic TLC so I have removed the "new" view in order to bring that functionality into the seed message page/view.

2014-05-20 14:25:45 -04:00

misconfig

fixing two A5 typos

2013-11-14 11:26:31 -05:00

redirects

updating description with owasp 2013 description

2013-11-12 15:24:07 -05:00

ssl_tls

closes issue #7

2013-06-04 13:59:41 -04:00

url_access

finished admin filter and write-up for issue #6

2013-06-04 11:49:59 -04:00

xss

Fixes #99. We have added the hogan method for escaping user input and added a tutorial

2014-04-17 12:51:02 -04:00

_header.html.erb

trying to fix a bug where you have to click twice on the tutorial credentials button

2013-06-20 11:28:29 -04:00

_sidebar.html.erb

changed constantize to metaprogramming for the addition of tutorials specific to metaprogramming flaws. In addition, the messages portion of the app needed some generic TLC so I have removed the "new" view in order to bring that functionality into the seed message page/view.

2014-05-20 14:25:45 -04:00