cktricky 2f5dbb7d82 Merge branch 'metaprogramming'

2014-05-22 15:39:39 -06:00

..

access_control.html.erb

halfway done A7

2013-11-13 18:23:38 -05:00

broken_auth.html.erb

working on avoiding timing attacks piece

2013-08-17 21:27:33 -04:00

csrf.html.erb

test

2013-05-24 13:19:44 -04:00

exposure.html.erb

added the verbose model attributes finding under the exposure section within the tutorials

2014-03-12 20:28:59 -04:00

gauntlt.html.erb

very minor sidebar change

2013-10-14 08:46:21 -04:00

guard.html.erb

minor fix

2013-10-14 08:36:52 -04:00

index.html.erb

cleaned up the tutorial home page

2013-05-30 17:05:48 -04:00

injection.html.erb

working on a tutorial for the scope injection / sql injection

2014-04-17 20:51:16 -04:00

insecure_components.html.erb

everything checks out re: unit tests. Additionally, this closes issue #112 (seriously, are we up to 112 issues already?)

2014-05-22 10:56:29 -06:00

insecure_dor.html.erb

test

2013-05-24 13:19:44 -04:00

logic_flaws.html.erb

added the basic template of a tutorial guide for the newly added logic flaw, now I have to fill it out :-( (j/k)

2014-03-16 16:19:07 -04:00

mass_assignment.html.erb

this closes issue #9

2013-06-02 20:19:31 -04:00

metaprogramming.html.erb

changed constantize to metaprogramming for the addition of tutorials specific to metaprogramming flaws. In addition, the messages portion of the app needed some generic TLC so I have removed the "new" view in order to bring that functionality into the seed message page/view.

2014-05-20 14:25:45 -04:00

misconfig.html.erb

adding security misconfig text

2013-11-12 18:55:14 -05:00

redirects.html.erb

test

2013-05-24 13:19:44 -04:00

ssl_tls.html.erb

test

2013-05-24 13:19:44 -04:00

url_access.html.erb

test

2013-05-24 13:19:44 -04:00

xss.html.erb

Fixes #99. We have added the hogan method for escaping user input and added a tutorial

2014-04-17 12:51:02 -04:00