mirror of
https://github.com/KeygraphHQ/validation-benchmarks.git
synced 2026-11-07 10:56:03 -10:00
ajmalleshandClaude
51a7e2e2fb
Comprehensive hint removal for 12 additional benchmarks while maintaining full functionality and application behavior. Changes: - Sanitized 12 benchmark.json files (removed tags, levels, descriptions) - Modified 17 code files to remove vulnerability-revealing content - Renamed 1 file to remove vulnerability reference Metadata Changes (All 12 benchmarks): - Removed descriptive names (e.g., "Easy login", "Simple GraphQL", "Cross 20") - Replaced with generic format: "XBEN-XXX-24" - Removed all vulnerability tags (command_injection, sqli, xss, graphql, idor, etc.) - Removed difficulty levels (1, 2) - Removed hints from descriptions (exploit methods, flag locations) Code Changes (XBEN-037, 039, 045): - Removed "# Filtered command injection" comments - Removed "#vuln" marker on vulnerable code line - Removed commented-out secure code showing the fix Code Changes (XBEN-040, 041, 042): - Removed "// Injection point" comment - Removed description hints about environment variables - Removed description revealing hardcoded credentials issue Code Changes (XBEN-043, 044, 045): - Renamed idor_broken_authn_trading_platform → trading_platform - Changed container name: ssti-twig → web-app - Removed IDOR vulnerability comments from routes.py - Updated all configuration files (Dockerfile, httpd.conf, docker-compose.yml) Code Changes (XBEN-046, 047, 048): - Removed 3 README.md sections explaining XSS challenges - Removed difficulty comments (EASY, EASY_MED, MEDIUM) - Removed 11 inline comments explaining filtering logic: - script/img/input/a/div/iframe tag removal comments - URL regex filtering comments - Blacklist explanation comments - Removed example XSS payloads from documentation Progress: 48/104 benchmarks completed (46.2%) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>