KeygraphHQ/juice-shop
1
0 Fork 0
mirror of https://github.com/KeygraphHQ/juice-shop.git synced 2026-11-07 11:06:06 -10:00
Code Issues Packages Projects Releases Wiki Activity
20,852 Commits 10 Branches 217 Tags
master
Commit Graph
1862 Commits
Author SHA1 Message Date
Bjoern Kimminich 53061b7f47 Switch from Placecats for CATAAS as cat image service 2025-06-12 16:05:12 +02:00
Bjoern Kimminich bd256f19fd Fix version range expectation 2025-04-28 15:35:32 +02:00
Bjoern Kimminich 05c6a9e10b Remove Node.js 23 support for now 2025-04-28 14:43:15 +02:00
Bjoern Kimminich ad9f316653 Update ESLint versions 2025-04-28 14:35:58 +02:00
Bjoern Kimminich 8900106b7a Set Node.js support to 20-23 2025-04-28 14:00:38 +02:00
Anvita Prasad 5daa84853d Make language selector searchable 2025-04-02 21:22:43 +02:00
Jannik Hollenbach a5ab969612 Migrate more build in modules to be imported using the node: prefix 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-31 21:52:27 +02:00
Jannik Hollenbach 8204a3998c Update all easily recognisable node.js native imports to be properly prefixed as recommended by node.js 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-31 21:41:59 +02:00
Jannik Hollenbach 9c097db826 Change last remaining requires by overwriting the fs file stream type to make it work with the wrong firsby types 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-24 22:49:08 +01:00
Jannik Hollenbach 1bd307f67b Update tests to use import and remove the test cases for now impossible cases (due to type safety) 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-24 22:18:09 +01:00
Jannik Hollenbach 557feef383 More test import migration 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 20:54:46 +01:00
Jannik Hollenbach 51e8b2086b Moved over some more insecurity imports in tests 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 20:45:35 +01:00
Jannik Hollenbach 233f315962 Update route exports and imports in server.ts 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 17:07:10 +01:00
Jannik Hollenbach 527bea8030 Update 2fa to export and update 2fa spec to import 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 16:09:03 +01:00
Jannik Hollenbach bb90da1c3c Update package json version to import 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 12:56:55 +01:00
Jannik Hollenbach e10a6a9e54 Update more requires in tests 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-23 12:24:21 +01:00
Jannik Hollenbach 23d4deca75 Drop undicy import 
Acutally already included in by default in node 18.0.0 which is the oldest version we support

Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-22 20:51:11 +01:00
Jannik Hollenbach 2115dc7c3f Migrate webhook to use fetch too 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-22 20:16:52 +01:00
Jannik Hollenbach b4fcd45058 Replace node-fetch with undici 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-22 19:47:42 +01:00
Jannik Hollenbach 7c071b8ce5 Make challengeKey typesafe to migrate datacache imports in tests to import 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-22 19:00:17 +01:00
Jannik Hollenbach ad91957161 Cypress auto lint 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-22 17:19:03 +01:00
Jannik Hollenbach e64bfb2c95 Update blueprintfile spec requires 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:42:33 +01:00
Jannik Hollenbach be1049a701 Update bot utils import 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:39:58 +01:00
Jannik Hollenbach e3c6223804 Update util calls to require 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:38:56 +01:00
Jannik Hollenbach f93f3af50e Move weird frisybc require/import mixture to proper imports 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:32:30 +01:00
Jannik Hollenbach 6bbc88c64b Cleanup import and simplify code for server setup and teardown api test functions 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:30:23 +01:00
Jannik Hollenbach 2a0082d996 Update remaining challenge util imports 2025-03-17 21:16:45 +01:00
Jannik Hollenbach 490e9a2afd Update yaml lib to imports 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 21:00:49 +01:00
Jannik Hollenbach e31195cb5d Update config requires 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-17 20:49:55 +01:00
JuiceShopBot 5f6bf8a282 Auto-fix linting issues 
Signed-off-by: JuiceShopBot <[email protected]>
 2025-03-15 22:44:30 +00:00
Jannik Hollenbach d212b6b433 Properly fix webhook tests, results were just ignored 
Plus the requests keep timing our as the remote url didn't exist anymore, replaced with a local server
Chai as promised was only used here and it didn't even work here so i've removed it for now

Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-15 23:41:36 +01:00
Jannik Hollenbach 16a837862b Switch sinon and chai requires to imports 2025-03-15 22:37:35 +01:00
Jannik Hollenbach 9595418ce6 Migrate more requires of nodejs build in modules 2025-03-15 22:32:26 +01:00
Jannik Hollenbach b3c2011a3b Migrate otpblib to imports 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-03-15 20:48:19 +01:00
Bjoern Kimminich 8bbccc5b4e Disable unreliable XXE DoS test 2025-03-04 17:03:45 +01:00
Bjoern Kimminich 6bd18e266b Wait longer for timeouts of DoS attacks via XML/YAML 2025-03-04 15:59:29 +01:00
Bjoern Kimminich e94b9fb343 Disable content lenghth tamper tests 
(fail on CI/CD while working on Windows locally)
 2025-03-04 15:56:07 +01:00
Bjoern Kimminich db295e2ef9 Move string conversion into VM call 
(as that is what will cause the timeout when performing
 a YAML bomb attack)
 2025-03-04 11:51:10 +01:00
Bjoern Kimminich 8633beab5e Merge branch 'develop' into challenge/memory-bomb 2025-03-04 11:05:21 +01:00
Björn Kimminich b386acf526 Add test cases for tampered content length on uploads 2025-03-03 21:01:42 +01:00
Bjoern Kimminich 59420c466b Add new "Memory Bomb" challenge 
(forked off the XXE DoS but with a YAML payload)
 2025-02-27 15:46:35 +01:00
Bjoern Kimminich 8712d358ae Revert "Slightly reduce entity reference count" 
This reverts commit cdcc362b2c.
 2025-02-27 11:40:02 +01:00
Bjoern Kimminich 4ca1e43927 Revert "Reduce quadratic blowup size slightly more" 
This reverts commit f4b974d4a3.
 2025-02-27 11:40:01 +01:00
Björn Kimminich f4b974d4a3 Reduce quadratic blowup size slightly more 2025-02-27 01:03:29 +01:00
Bjoern Kimminich cdcc362b2c Slightly reduce entity reference count 
(to avoid "Entity reference loop" detection on CI/CD)
 2025-02-26 13:24:12 +01:00
Bjoern Kimminich 7dc12e5519 Properly split actual test uploads and challenge check 
(for both XXE challenges)
 2025-02-26 11:53:11 +01:00
Jannik Hollenbach dc9be9d155 Increase e2e chatbot retries to prevent random flakyness 
It was failing in 1-(8/9)^40 (0.9%) of executions and as we run them on ubuntu and macos the chance is even higher.
Not it should only fail in 0.0001% or so of cases. While only taking 2x as long in cases of this being actually broken.

Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-02-10 20:05:39 +01:00
Jannik Hollenbach ae843d65d0 Prevent flaky test by waiting for element to become interactable after awaiting the api call to ensure that angular updated the DOM in the meantime. 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-02-10 19:46:23 +01:00
Jannik Hollenbach 87f7280fdd Adapt geoStalking challenge e2e test for Angular 17 changes 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-02-10 19:34:33 +01:00
Jannik Hollenbach ef3b69b22c Fix contact e2e test 
Signed-off-by: Jannik Hollenbach <[email protected]>
 2025-02-10 19:29:50 +01:00