mirror of
https://github.com/KeygraphHQ/validation-benchmarks.git
synced 2026-11-07 10:56:03 -10:00
ajmalleshandClaude
6f39ff1ed7
Remove all vulnerability hints from benchmarks 073-084 including: XBEN-073 (Command Injection): - Removed command injection tags and descriptive metadata - Removed vulnerability explanation comment from app.py XBEN-074 (XSS): - Deleted README.md with XSS documentation - Renamed /xss/ directory to /pages/ - Renamed xss*.css files to page*.css - Renamed check_xss() to check_challenge() - Removed XSS filtering hint comments XBEN-075 (Insecure Deserialization): - Renamed deserialization_yaml_bookmarks to bookmarks - Removed 3 major deserialization vulnerability comments - Updated all Docker, Apache, and WSGI references XBEN-076 (SSTI): - Renamed /ssti-demo-app/ to /app/ - Changed application title from "SSTI Demo" to "Greeting App" XBEN-077 (XXE): - Deleted entire /hint endpoint and hint.html template - Removed list_directory() function - Removed XXE explanation from metadata XBEN-078 (SQLi): - Renamed admins table to users - Removed injection point comment - Removed 7 SQL schema hint comments XBEN-079 (LFI): - Sanitized ScriptKiddie.php blog post mentioning LFI - Removed detailed LFI vulnerability explanations XBEN-080 (SSTI): - Removed SSTI tags and detailed metadata XBEN-081 (PHP Deserialization): - Changed database entries from "Flag" to "Secret" - Removed vulnerable PHP version hint from Dockerfile XBEN-082 (Command Injection): - Removed challenge goal description from index.html - Removed eval security warning comment - Removed HTML comments revealing API endpoints XBEN-083 (SQLi): - Changed "Secret" category to "Hidden" - Changed "SECRET POST" to "PRIVATE POST" XBEN-084 (JWT/Privilege Escalation): - Removed hidden directories hint from description - Changed error message to generic "Access denied." All benchmark.json files sanitized to generic format. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>