KeygraphHQ/juice-shop
1
0 Fork 0
mirror of https://github.com/KeygraphHQ/juice-shop.git synced 2026-11-10 10:41:36 -10:00
Code Issues Packages Projects Releases Wiki Activity
21,156 Commits 10 Branches 217 Tags
develop
Commit Graph
610 Commits
Author SHA1 Message Date
Bjoern Kimminich 53061b7f47 Switch from Placecats for CATAAS as cat image service 2025-06-12 16:05:12 +02:00
Jannik Hollenbach a5ab969612 Migrate more build in modules to be imported using the node: prefix 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-31 21:52:27 +02:00
Jannik Hollenbach 8204a3998c Update all easily recognisable node.js native imports to be properly prefixed as recommended by node.js 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-31 21:41:59 +02:00
Jannik Hollenbach 9c097db826 Change last remaining requires by overwriting the fs file stream type to make it work with the wrong firsby types 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-24 22:49:08 +01:00
Jannik Hollenbach 557feef383 More test import migration 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 20:54:46 +01:00
Jannik Hollenbach 51e8b2086b Moved over some more insecurity imports in tests 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 20:45:35 +01:00
Jannik Hollenbach 233f315962 Update route exports and imports in server.ts 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 17:07:10 +01:00
Jannik Hollenbach 527bea8030 Update 2fa to export and update 2fa spec to import 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 16:09:03 +01:00
Jannik Hollenbach e3c6223804 Update util calls to require 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:38:56 +01:00
Jannik Hollenbach f93f3af50e Move weird frisybc require/import mixture to proper imports 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:32:30 +01:00
Jannik Hollenbach b3c2011a3b Migrate otpblib to imports 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-15 20:48:19 +01:00
Bjoern Kimminich e94b9fb343 Disable content lenghth tamper tests 
(fail on CI/CD while working on Windows locally)
 2025-03-04 15:56:07 +01:00
Bjoern Kimminich db295e2ef9 Move string conversion into VM call 
(as that is what will cause the timeout when performing
 a YAML bomb attack)
 2025-03-04 11:51:10 +01:00
Bjoern Kimminich 8633beab5e Merge branch 'develop' into challenge/memory-bomb 2025-03-04 11:05:21 +01:00
Björn Kimminich b386acf526 Add test cases for tampered content length on uploads 2025-03-03 21:01:42 +01:00
Bjoern Kimminich 59420c466b Add new "Memory Bomb" challenge 
(forked off the XXE DoS but with a YAML payload)
 2025-02-27 15:46:35 +01:00
Bjoern Kimminich 7dc12e5519 Properly split actual test uploads and challenge check 
(for both XXE challenges)
 2025-02-26 11:53:11 +01:00
Bjoern Kimminich 9d1a6741d7 Merge branch 'develop' into angular17 
# Conflicts:
#	frontend/src/app/two-factor-auth/two-factor-auth.component.html
 2025-01-28 17:55:53 +01:00
tinyboxvkBjoern KimminichTan Ton
 		e6385d231a Fix typos (#2427) 
* Pull in exclusions from develop branch

* added translation (#2411)

* Fix typos

Signed-off-by: tinyboxvk <[email protected]>

---------

Signed-off-by: tinyboxvk <[email protected]>
Co-authored-by: Bjoern Kimminich <[email protected]>
Co-authored-by: Tan Ton <[email protected]>
 2025-01-28 17:49:55 +01:00
Björn Kimminich e45e8a4d3f Merge branch 'develop' into angular17 
# Conflicts:
#	frontend/package.json
#	frontend/src/app/about/about.component.html
#	frontend/src/app/about/about.component.ts
 2025-01-04 18:26:51 +01:00
Björn Kimminich 623fc01582 Update copyright to include 2025 2025-01-01 19:37:26 +01:00
Bjoern Kimminich a0b64f98bd Swap out abandoned placekitten.com usage 
(with similar placecats.com)
 2024-12-10 18:27:01 +01:00
drwtsn95 91043307e5 Fix crash when out-of-alphabet value passed to hashid.decode() 2024-11-25 20:26:16 +01:00
Alexey Smirnov 7f538f34ea Fix: Ensure ensureFileIsPassed handles file absence explicitly 
Signed-off-by: Alexey Smirnov <[email protected]>
 2024-11-06 09:49:32 +03:00
Bjoern Kimminich defa1def04 Merge branch 'develop' into martinakraus-master 2024-04-05 12:05:54 +02:00
Jannik Hollenbach 4d55b43c9d Merge pull request #2205 from juice-shop/feat/csaf-chal 2024-04-02 00:03:12 +02:00
Björn Kimminich 52a257478c Merge branch 'develop' into martinakraus-master 2024-03-25 22:59:12 +01:00
Timo Pagel f5c4777548 fix: serve csaf files in subfolders 
chore: enhance testing to include file content
 2024-03-13 08:53:13 +01:00
Jannik Hollenbach d7a4dac0c6 Refactor safetyMode setting 2024-03-10 10:31:50 +01:00
Timo Pagel 3292776cec feat: add csaf 2024-03-09 10:37:21 +01:00
Bjoern Kimminich 29b0621b07 Revert "Adapt test for non-unicode encoding" 
This reverts commit 4fc3db3695.
 2024-03-05 15:38:48 +01:00
Björn Kimminich 4fc3db3695 Adapt test for non-unicode encoding 
(since Angular 16/17)
 2024-03-05 01:18:41 +01:00
Bjoern Kimminich d1844f537f Merge branch 'develop' into martinakraus-master 2024-03-04 16:57:46 +01:00
Bjoern Kimminich 39493564ed Disable all Internet access tests 
(due to regular ECONNRESET issues)
 2024-03-04 16:28:51 +01:00
Bjoern Kimminich cc754e9f3a Adapt test case to new repo ownership 2024-03-04 15:53:24 +01:00
Björn Kimminich b8ec74f452 Fix merge conflicts from removing ng-spinner 2024-02-27 08:31:16 +01:00
Bjoern Kimminich 61bc34214e Update typosquatting challenge target 2024-02-26 13:55:13 +01:00
Bjoern Kimminich 880801ef6f Replace emoji in filename with ascii art of cat 2024-02-22 16:59:55 +01:00
Jannik Hollenbach f683019acf Don't return tokens for all authenticated users anymore and refactor authenticatedUsers endpoint 2024-01-16 21:28:47 +01:00
Jannik Hollenbach f38bcc704a Move authenticatedUsers into it's own test file 2024-01-16 21:28:47 +01:00
Jannik Hollenbach 8ed0e9983d Use automatically generated model types 
Requires us to have proper types around for the config as the manual types (incorrectly) had the additional properties of the config file set
 2024-01-13 12:16:13 +01:00
Björn Kimminich 87beace18d Fix all restrict-plus-operands linting issues 2024-01-06 14:59:58 +01:00
Björn Kimminich 91bd1088ce Bump copyright to include year 2024 2023-12-24 09:07:52 +01:00
Björn Kimminich 5299a1bdc6 Add test case for event listener registration 2023-10-29 20:57:41 +01:00
Björn Kimminich dfc172fc99 Add Web3 tests for NFT minting verification 2023-10-22 21:32:21 +02:00
Björn Kimminich 428ce0681e Add Web3 Wallet tests 2023-10-21 21:46:14 +02:00
Björn Kimminich 4e1b04d804 Add API tests for two Web3-related endpoints 2023-10-21 00:46:46 +02:00
Björn Kimminich dea548e73a Update HTTP-related test expectations 2023-10-20 20:10:17 +02:00
Björn Kimminich c25fcf1ef8 Amend URLs to new GitHub org 
(fixes #2120)
 2023-10-09 21:47:58 +02:00
Björn Kimminich 4488721cf4 Tag all TypeScript issues as FIXMEs 2023-09-19 19:14:28 +02:00