104 Commits
Author SHA1 Message Date
Jannik Hollenbach 34ac167184 Remove coding challenge list endpoint and service
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-04-30 21:15:54 +02:00
Bjoern Kimminich ad9f316653 Update ESLint versions 2025-04-28 14:35:58 +02:00
Jannik Hollenbach a5ab969612 Migrate more build in modules to be imported using the node: prefix
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-31 21:52:27 +02:00
Jannik Hollenbach 6249fa8183 Disable rateLimiter security warnings to supress warn logs during api test runs
This seems like the proper JuiceShopian solution to warnings

Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-31 21:46:35 +02:00
Jannik Hollenbach 8204a3998c Update all easily recognisable node.js native imports to be properly prefixed as recommended by node.js
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-31 21:41:59 +02:00
Jannik Hollenbach 71800adf0e Revert "Migrate error handler"
This reverts commit 9358b925ed.
2025-03-25 19:06:07 +01:00
Jannik Hollenbach 9358b925ed Migrate error handler 2025-03-24 22:36:15 +01:00
Jannik Hollenbach bc518486f9 Sort import by line length, looks more organised 🗂️
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-23 20:16:30 +01:00
Jannik Hollenbach 50bdf0b0a7 Update remaining fixable requires in server.ts
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-23 20:01:07 +01:00
Jannik Hollenbach 5866eeb9a1 Update code fixes & and or imports to be easier to get right
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-23 19:57:23 +01:00
Jannik Hollenbach 233f315962 Update route exports and imports in server.ts
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-23 17:07:10 +01:00
Jannik Hollenbach 09f73e23a8 Update most external requries from the server.ts
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-22 22:25:13 +01:00
Jannik Hollenbach 490e9a2afd Update yaml lib to imports
Signed-off-by: Jannik Hollenbach <[email protected]>
2025-03-17 21:00:49 +01:00
Jannik Hollenbach de333cb0b3 Fix weird fs import in server too 2025-03-15 20:59:21 +01:00
Bjoern Kimminich 59420c466b Add new "Memory Bomb" challenge
(forked off the XXE DoS but with a YAML payload)
2025-02-27 15:46:35 +01:00
Björn Kimminich 623fc01582 Update copyright to include 2025 2025-01-01 19:37:26 +01:00
Sagnik Mandal 42667286bb check upload size before handling zip files (#2417)
Signed-off-by: Sagnik Mandal <[email protected]>
2025-01-01 19:13:19 +01:00
Timo Pagel 496f868531 chore: enhance serving of csaf files 2024-03-15 19:17:49 +01:00
Timo PagelandJannik Hollenbach e3c11a0cdb Update server.ts
Co-authored-by: Jannik Hollenbach <[email protected]>
2024-03-15 16:24:51 +01:00
Timo Pagel f5c4777548 fix: serve csaf files in subfolders
chore: enhance testing to include file content
2024-03-13 08:53:13 +01:00
Timo Pagel 3292776cec feat: add csaf 2024-03-09 10:37:21 +01:00
Bjoern Kimminich b7812ac2e1 Fix all @typescript-eslint/restrict-template-expressions warnings 2024-01-24 13:56:01 +01:00
Jannik Hollenbach 85867e6e67 Fix unrelated linting issue 2024-01-16 21:35:35 +01:00
Jannik Hollenbach f683019acf Don't return tokens for all authenticated users anymore and refactor authenticatedUsers endpoint 2024-01-16 21:28:47 +01:00
Jannik Hollenbach a3f344032d Migrate lib & startup func's to esm 2024-01-13 16:08:18 +01:00
Jannik Hollenbach 207b03c480 Migrate datacreator 2024-01-13 13:31:06 +01:00
Jannik Hollenbach 4f1d6eb881 Migrate prom-client to esm 2024-01-13 13:23:41 +01:00
Björn Kimminich 87beace18d Fix all restrict-plus-operands linting issues 2024-01-06 14:59:58 +01:00
Björn Kimminich 91bd1088ce Bump copyright to include year 2024 2023-12-24 09:07:52 +01:00
Björn Kimminich d4349093c5 Track expected preceding interaction with URLs
(before a challenge is solved, and print percentage in cheat logs. Just informative for testing, no impact on score yet!)
2023-12-07 23:14:47 +01:00
Björn Kimminich 4488721cf4 Tag all TypeScript issues as FIXMEs 2023-09-19 19:14:28 +02:00
Bjoern Kimminich 31eaaee031 Update ESLint to latest
(and apply rule changes to codebase)
2023-09-19 17:38:35 +02:00
rishabhkeshan edd7c1a794 feat: added the new Web3 Wallet component 2023-08-17 16:31:15 +05:30
rishabhkeshan 17135441ee feat: added new NFT contract with event emitter, modified backend to listen to events and validate NFT mint 2023-08-09 00:19:28 +05:30
rishabhkeshan 0872d6ba78 feat: implemented lazy loading for faucet component 2023-08-08 16:27:03 +05:30
rishabhkeshan c800f7092d feat: added integer overflow challenge 2023-07-31 19:55:13 +05:30
9da0df145d feat: added Riches on Juice Shop challenge (#2029)
* feat: added Riches on Juice Shop challenge, implemented ethers seedphrase to private key conversion for challenge page routing, added new product 'NFT Me' on Juice Shop along with a new page for the challenge

* feat: added backend route for seedphrase leak challenge, added new user and feedback with seed phrase, implemented conditional rendering on form submission

* added css for the inputs, added new route for challenge solved check

* fixed response destructuring, remoted console logs, fixed check for challenge solved or successful input

* fix: added country mapping for seedPhraseLeakChallenge

* fix: repeat country code, added route path in feedback, fixed linting

* fix: added checks for input with special cases, made changes to the challenge details

* fix: lint fix

* feat: discarded .DS_store

* fix: rsn fix

* feat(challenge): Updated 'Juicy NFT Seed Saga' challenge with seed phrase leak

- Updated challenge name and description to 'Juicy NFT Seed Saga'
- Improved clarity in the challenge description
- Named the Angular component 'nft-unlock-component'

* feat: made changes to challenge name and description, changed static colors to material UI classes, changed error messages

* feat: removed unused comments

* Add Dublin AppSec 2023 video link

Be advised that the video and audio are severely out of sync on this one unfortunately.

* Update 2023 conference appearances

* Update GitHub contributor stats

* [ImgBot] Optimize images

/screenshots/git-stats.png -- 74.39kb -> 26.26kb (64.71%)

Signed-off-by: ImgBotApp <[email protected]>

* First bunch

* Next bunch

* Next bunch

* Next bunch

* Next bunch

* Next bunch

* Last bunch

* New translations en.json (German, Switzerland)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (German, Switzerland)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* More translation and improved consistency

* added timout to make scroll correct for chatbot

Signed-off-by: Parth Nanda <[email protected]>

* Corrected lint error

* Remove semicolon

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Dutch)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* Bump to v15.1.0-SNAPSHOT

* Run `dom.watch()` only once

Previously a lot of component registered this watch.
Each of them created a MutationObserver running on dom modifications.
This slows down the page way more then it needs to as the action this performs is global and should not be triggered more than once.

Signed-off-by: Jannik Hollenbach <[email protected]>

* Double scroll timeout to 1/4 sec

(to allow non-localhost systems to respond before scrolling happens)

* Clear timeout chat scroll down timeout on ngDestroy

* Auto-fix linting issues

Signed-off-by: JuiceShopBot <[email protected]>

* Fix incorrect hardcoded node.js version in action name

* Update version to auto-commit action

* Upgrade to juicy-chat-bot version with en lang support

Signed-off-by: Jannik Hollenbach <[email protected]>

* build: add BOM files to dist packages

fixes #2028

Signed-off-by: Jan Kowalleck <[email protected]>

* ci workflow version streamline

Signed-off-by: Jan Kowalleck <[email protected]>

* bom in docker image

Signed-off-by: Jan Kowalleck <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Portuguese, Brazilian)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* Upgrade to latest cpu & memory improved version of swagger-ui-express

Signed-off-by: Jannik Hollenbach <[email protected]>

* New translations en.json (Turkish)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* New translations en.json (Turkish)
[ci skip]
Signed-off-by: Björn Kimminich <[email protected]>

* Pin flag-icons library to 6.8.x version

(fixes #2047)

* Update browsers list and Karma config for Angular 15

* Fix linting issues

* Switch to Windows Server 2019 OS

(to debug test runner issues not reproducable on local Win 11)

* Revert "Switch to Windows Server 2019 OS"

This reverts commit 48ca0c81b0.

* Remove Windows from build matrix for unit tests

(due to 'Error: ENOENT: no such file or directory, open' error
 breaking at least on Node 20.5.0 constantly)

* Switch wallet tests to demo user

(to avoid conflicts with shopping tests where Jim is used.
 Fixes #2030)

---------

Signed-off-by: ImgBotApp <[email protected]>
Signed-off-by: Parth Nanda <[email protected]>
Signed-off-by: Jannik Hollenbach <[email protected]>
Signed-off-by: JuiceShopBot <[email protected]>
Signed-off-by: Jan Kowalleck <[email protected]>
Co-authored-by: Björn Kimminich <[email protected]>
Co-authored-by: Bjoern Kimminich <[email protected]>
Co-authored-by: ImgBotApp <[email protected]>
Co-authored-by: Eric Nieuwland <[email protected]>
Co-authored-by: Parth Nanda <[email protected]>
Co-authored-by: Parth Nanda <[email protected]>
Co-authored-by: Jannik Hollenbach <[email protected]>
Co-authored-by: JuiceShopBot <[email protected]>
Co-authored-by: Jan Kowalleck <[email protected]>
2023-07-27 20:23:37 +02:00
Jannik Hollenbach 9ae143b0c9 Update all utils references to imports
Also fixes related typescript issues
2023-05-06 18:23:06 +02:00
Jannik Hollenbach 2fc2d1dfcb Fix typescript errors 2023-05-06 18:23:06 +02:00
Jannik Hollenbach d6ad286e5e Move colors to import 2023-05-06 18:23:06 +02:00
Jannik Hollenbach 8acbd6a1b4 Use morgan to import 2023-05-06 18:23:06 +02:00
Jannik Hollenbach 0726e8838d Move path to import 2023-05-06 18:23:06 +02:00
Jannik Hollenbach b66f0fd17e Move config to import 2023-05-06 18:23:06 +02:00
Jannik Hollenbach 08bbec0a7e Move logger to import 2023-05-06 18:23:06 +02:00
Freedisch 627ddec02e hot fix (forbid empty user ) 2023-03-14 17:55:42 +03:00
Freedisch ef2ab612c8 check added before trim 2023-03-13 11:44:29 +03:00
Freedisch 8029863d2d trim email and password in User api 2023-02-27 01:32:45 +03:00
Freedisch 2d7562c2b3 added the route for the challenge 2023-02-26 13:28:20 +03:00
Bjoern Kimminich b3c3c1ccc4 Disable API pagination for all models 2023-02-14 11:09:31 +01:00
Bjoern Kimminich 948f22771c Bump copyright notes to include 2023 2022-12-26 00:32:14 +01:00