123 Commits
Author SHA1 Message Date
Björn Kimminich 27cf1a95aa Amend RSN deviations from new Hint model 2025-08-23 22:44:01 +02:00
Bogdan Mihai Nicolae 47d6b114e1 Refactor XSS challenge files to fix indentation 2025-07-30 07:55:19 +03:00
Bogdan Mihai Nicolae b3d946b8b7 Removed extra indentation 2025-07-28 06:56:59 +03:00
Bogdan Mihai Nicolae 031f42e0eb Refactor all RxJS subscriptions with error handling to use Observer object syntax 2025-07-27 17:59:02 +03:00
Jannik Hollenbach 71800adf0e Revert "Migrate error handler"
This reverts commit 9358b925ed.
2025-03-25 19:06:07 +01:00
Jannik Hollenbach 9358b925ed Migrate error handler 2025-03-24 22:36:15 +01:00
Jannik Hollenbach 5866eeb9a1 Update code fixes & and or imports to be easier to get right
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-23 19:57:23 +01:00
Jannik Hollenbach 3a0acc9410 Update codefixes properly 2025-03-22 22:49:56 +01:00
Jannik Hollenbach e8cdb7e8ac Give product review route functions uniq names to ensure we can keep them apart in stack traces
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-22 17:22:24 +01:00
Jannik Hollenbach 1f4bc99f05 Fix typos in module and function names
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-11 17:38:06 +01:00
Jannik Hollenbach 22d0e13159 Update codefixes for challenges in adjacent code
Should resolve failing RSN ci
2024-04-01 22:31:18 +02:00
Jannik Hollenbach 85867e6e67 Fix unrelated linting issue 2024-01-16 21:35:35 +01:00
Jannik Hollenbach ad622a561a Migrate remaining commonjs require in models to esm 2024-01-13 17:48:09 +01:00
Jannik Hollenbach 30a077d7de Remove the now removed requires from the codefix snippet 2024-01-13 16:25:48 +01:00
Jannik Hollenbach d3d72d5ecd Migrate mongodb to esm 2024-01-13 12:49:55 +01:00
Björn Kimminich 87beace18d Fix all restrict-plus-operands linting issues 2024-01-06 14:59:58 +01:00
Ryan TanandBjörn Kimminich 7786bda494 Fix a typo in Restful XSS code fix challenge (#2161)
* Add ZAP Chat 05 with @psiinon

* fixed a typo in restfulXSS code challenge

* Revert "fixed a typo in restfulXSS code challenge"

This reverts commit 992ab8e4abcf07574b51c190b23da7506c6dcd6c.

* fixed typo in restfulChallenge

Signed-off-by: Ryan Tan <[email protected]>

---------

Signed-off-by: Ryan Tan <[email protected]>
Co-authored-by: Björn Kimminich <[email protected]>
2023-12-06 19:42:00 +01:00
Björn Kimminich c25fcf1ef8 Amend URLs to new GitHub org
(fixes #2120)
2023-10-09 21:47:58 +02:00
Bjoern Kimminich 31eaaee031 Update ESLint to latest
(and apply rule changes to codebase)
2023-09-19 17:38:35 +02:00
Björn Kimminich fa35a853e8 Update codefix templates to match snippets
(to bring RSN to zero differences)
2023-09-13 23:56:52 +02:00
Bjoern Kimminich f985c996d0 Add empty codefixes/info files for Web3 coding challenges 2023-09-13 10:31:29 +02:00
Björn Kimminich 3cd3645763 Add "Web3 Sandbox" coding challenge
(and fix RSN caching to cover files
 other than .ts)
2023-09-13 00:21:40 +02:00
rishabhkeshan 581a0398d3 feat: added Web3 Sandbox component with compile, deploy and invoke functionalities 2023-09-06 12:52:19 +05:30
rishabhkeshan edd7c1a794 feat: added the new Web3 Wallet component 2023-08-17 16:31:15 +05:30
rishabhkeshan 0872d6ba78 feat: implemented lazy loading for faucet component 2023-08-08 16:27:03 +05:30
rishabhkeshan 9f11928f95 fix: refactored faucet component, class renaming, styling fix, function check for window.ethereum, removed photo wall component check and axios dependency 2023-08-04 08:47:01 +05:30
rishabhkeshan c800f7092d feat: added integer overflow challenge 2023-07-31 19:55:13 +05:30
9da0df145d feat: added Riches on Juice Shop challenge (#2029)
* feat: added Riches on Juice Shop challenge, implemented ethers seedphrase to private key conversion for challenge page routing, added new product 'NFT Me' on Juice Shop along with a new page for the challenge

* feat: added backend route for seedphrase leak challenge, added new user and feedback with seed phrase, implemented conditional rendering on form submission

* added css for the inputs, added new route for challenge solved check

* fixed response destructuring, remoted console logs, fixed check for challenge solved or successful input

* fix: added country mapping for seedPhraseLeakChallenge

* fix: repeat country code, added route path in feedback, fixed linting

* fix: added checks for input with special cases, made changes to the challenge details

* fix: lint fix

* feat: discarded .DS_store

* fix: rsn fix

* feat(challenge): Updated 'Juicy NFT Seed Saga' challenge with seed phrase leak

- Updated challenge name and description to 'Juicy NFT Seed Saga'
- Improved clarity in the challenge description
- Named the Angular component 'nft-unlock-component'

* feat: made changes to challenge name and description, changed static colors to material UI classes, changed error messages

* feat: removed unused comments

* Add Dublin AppSec 2023 video link

Be advised that the video and audio are severely out of sync on this one unfortunately.

* Update 2023 conference appearances

* Update GitHub contributor stats

* [ImgBot] Optimize images

/screenshots/git-stats.png -- 74.39kb -> 26.26kb (64.71%)

Signed-off-by: ImgBotApp <[email protected]>

* First bunch

* Next bunch

* Next bunch

* Next bunch

* Next bunch

* Next bunch

* Last bunch

* New translations en.json (German, Switzerland)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (German, Switzerland)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* More translation and improved consistency

* added timout to make scroll correct for chatbot

Signed-off-by: Parth Nanda <[email protected]>

* Corrected lint error

* Remove semicolon

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* Bump to v15.1.0-SNAPSHOT

* Run `dom.watch()` only once

Previously a lot of component registered this watch.
Each of them created a MutationObserver running on dom modifications.
This slows down the page way more then it needs to as the action this performs is global and should not be triggered more than once.

Signed-off-by: Jannik Hollenbach <[email protected]>

* Double scroll timeout to 1/4 sec

(to allow non-localhost systems to respond before scrolling happens)

* Clear timeout chat scroll down timeout on ngDestroy

* Auto-fix linting issues

Signed-off-by: JuiceShopBot <[email protected]>

* Fix incorrect hardcoded node.js version in action name

* Update version to auto-commit action

* Upgrade to juicy-chat-bot version with en lang support

Signed-off-by: Jannik Hollenbach <[email protected]>

* build: add BOM files to dist packages

fixes #2028

Signed-off-by: Jan Kowalleck <[email protected]>

* ci workflow version streamline

Signed-off-by: Jan Kowalleck <[email protected]>

* bom in docker image

Signed-off-by: Jan Kowalleck <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* Upgrade to latest cpu & memory improved version of swagger-ui-express

Signed-off-by: Jannik Hollenbach <[email protected]>

* New translations en.json (Turkish)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Turkish)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* Pin flag-icons library to 6.8.x version

(fixes #2047)

* Update browsers list and Karma config for Angular 15

* Fix linting issues

* Switch to Windows Server 2019 OS

(to debug test runner issues not reproducable on local Win 11)

* Revert "Switch to Windows Server 2019 OS"

This reverts commit 48ca0c81b0.

* Remove Windows from build matrix for unit tests

(due to 'Error: ENOENT: no such file or directory, open' error
 breaking at least on Node 20.5.0 constantly)

* Switch wallet tests to demo user

(to avoid conflicts with shopping tests where Jim is used.
 Fixes #2030)

---------

Signed-off-by: ImgBotApp <[email protected]>
Signed-off-by: Parth Nanda <[email protected]>
Signed-off-by: Jannik Hollenbach <[email protected]>
Signed-off-by: JuiceShopBot <[email protected]>
Signed-off-by: Jan Kowalleck <[email protected]>
Co-authored-by: Björn Kimminich <[email protected]>
Co-authored-by: Bjoern Kimminich <[email protected]>
Co-authored-by: ImgBotApp <[email protected]>
Co-authored-by: Eric Nieuwland <[email protected]>
Co-authored-by: Parth Nanda <[email protected]>
Co-authored-by: Parth Nanda <[email protected]>
Co-authored-by: Jannik Hollenbach <[email protected]>
Co-authored-by: JuiceShopBot <[email protected]>
Co-authored-by: Jan Kowalleck <[email protected]>
2023-07-27 20:23:37 +02:00
Jannik Hollenbach 6fcf89b95a Update rsn for challenges which non relevant line changes 2023-05-06 19:09:49 +02:00
Bjoern Kimminich b3c3c1ccc4 Disable API pagination for all models 2023-02-14 11:09:31 +01:00
Timo Pagel b81816ba46 Merge branch 'master' into feat/weakPasswordCode 2023-01-18 09:08:26 +01:00
Timo Pagel 69cace41fa move logic to user.ts 2023-01-18 09:07:06 +01:00
Bjoern Kimminich 9a39a5043c Apply code changes to affected challenge fixes 2022-12-19 21:01:20 +01:00
Timo Pagel e5c66361ae remove newline and update rsn cache 2022-10-30 09:05:50 +01:00
Timo Pagel b4bb3fb3d6 beautify text 2022-10-29 09:25:51 +02:00
Timo Pagel f9f0f0fd6c beautify text 2022-10-29 09:14:23 +02:00
Timo Pagel 21e9fbcfa2 add end of line 2022-10-29 09:06:42 +02:00
Timo Pagel ec6644006f add code fix for weakPassword 2022-10-29 09:03:20 +02:00
Bjoern Kimminich a42ea9afcf Fix typo 2022-10-01 11:39:04 +02:00
Matthew Moses bb0aa00d09 Update code fix answers. Adjust logic in server.ts so /metrics endpoint is properly registered
Signed-off-by: Matthew Moses <[email protected]>
2022-09-23 14:34:33 -05:00
Matthew Moses 654a28b646 Initial commit fix for issue 1755. Solution: Delay metrics loop startup until the database synchronization at startup is complete to avoid having the metrics loop trying to query the database in a partially setup state.
Signed-off-by: Matthew Moses <[email protected]>
2022-09-23 13:34:29 -05:00
Bjoern Kimminich d233a2ef66 Move entity definition wait loop before metrics setup
(because the metrics will issue raw SQL queries
 to Wallets, Feedbacks and other tables and some
 if not all reported issues have been coming from
 exactly those queries.)
2022-06-24 23:46:16 +02:00
Bjoern Kimminich 6d71ed1b16 Adapt code changes in affected coding challenge solution options 2022-06-24 18:36:45 +02:00
Bjoern Kimminich c21bbd5935 Include IP filter in solve option files 2022-06-05 13:45:56 +02:00
Francesco Dipi ad6e1b5057 Fix typo
Fixed typo on the exposed metrics challenge explaination message.
The same typo has been fixed on the json file of each translation.

Signed-off-by: Francesco Dipi
2022-05-28 19:31:20 +02:00
Bjoern Kimminich de9aaf526d Adapt code fixes to refactorings from #1798 2022-05-07 07:25:20 +02:00
Bjoern Kimminich 2012a933ff Adapt fix option files to code changes 2022-04-15 15:56:59 +02:00
Bjoern Kimminich ca04c49888 Fall back to nested error handling
(as otherwise the SQL Injection errors are swallowed by a promise
 rejection error, making the corresponding challenges much harder
 to solve than intended.)
2022-03-30 19:35:24 +02:00
Bjoern Kimminich 3671e40870 Adapt code fix files to sequelize model refactorings 2022-03-30 08:20:25 +02:00
Bjoern Kimminich eb863875ae Introduce or clarify various type declarations 2022-02-16 13:56:37 +01:00