Improve challenge61 and heroku cds usage by commjoen · Pull Request #2438 · OWASP/wrongsecrets

commjoen · 2026-03-06T21:59:43Z

What kind of changes does this PR include?

Fixes or refactors: improve challenge61 and improve heroku cds usage for sp4.0
A new challenge
Additional documentation
Something else

Description

Relations

References

Checklist:

All the contributions made are solely the work of me and my co-authors
I used AI to generate parts of the content.
I tested the changes in this PR (if applicable)
I added unit tests to ensure my change works (when change in Java or on front-end code)
I added UI tests to ensure my UI changes work (when change in the overall UI, not needed if just adding a challenge)
The PR passes pre-commit hooks and automated tests

github-actions · 2026-03-06T22:00:02Z

🚨 Version Sync Issue Detected

The versions in your Dockerfiles don't match the version in pom.xml.

🔧 To fix this automatically:

./scripts/sync-versions.sh
git add Dockerfile Dockerfile.web
git commit -m "Sync versions with pom.xml"

📋 Current status:

The validate-versions.sh script found mismatched versions
Please ensure all Docker build arguments match the Maven project version
This helps maintain consistency across all deployment methods

_{Automated version check by GitHub Actions}

github-actions · 2026-03-06T22:01:20Z

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2438

📄 What's included:

✅ All CSS, JavaScript, and static assets (embedded inline)
✅ Current styling and layout preview
✅ Images, icons, and UI components
✅ NEW: Generated HTML from Thymeleaf templates
- 🏠 Home/Welcome Page
- ℹ️ About Page
- 📊 Stats & Config Page
- 🤖 Challenge 57: LLM Security (Latest)
- 🧩 Challenge Example

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.

_{Static preview with Thymeleaf generation by GitHub Actions}

commjoen · 2026-03-07T04:05:57Z

@copilot can you fix the failing checks please?

Copilot · 2026-03-07T04:06:03Z

@commjoen I've opened a new pull request, #2439, to work on those changes. Once the pull request is ready, I'll request review from you.

…ockerfile versions Co-authored-by: commjoen <1457214+commjoen@users.noreply.github.com>

[WIP] Improve challenge61 and optimize Heroku CDS usage

github-actions · 2026-03-07T04:16:31Z

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2438

📄 What's included:

✅ All CSS, JavaScript, and static assets (embedded inline)
✅ Current styling and layout preview
✅ Images, icons, and UI components
✅ NEW: Generated HTML from Thymeleaf templates
- 🏠 Home/Welcome Page
- ℹ️ About Page
- 📊 Stats & Config Page
- 🤖 Challenge 57: LLM Security (Latest)
- 🧩 Challenge Example

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.

_{Static preview with Thymeleaf generation by GitHub Actions}

github-actions · 2026-03-07T04:19:29Z

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2438

📄 What's included:

✅ All CSS, JavaScript, and static assets (embedded inline)
✅ Current styling and layout preview
✅ Images, icons, and UI components
✅ NEW: Generated HTML from Thymeleaf templates
- 🏠 Home/Welcome Page
- ℹ️ About Page
- 📊 Stats & Config Page
- 🤖 Challenge 57: LLM Security (Latest)
- 🧩 Challenge Example

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.

_{Static preview with Thymeleaf generation by GitHub Actions}

github-actions · 2026-03-07T04:22:07Z

🔨 Preview Build Complete!

Your changes have been built and pushed to GitHub Container Registry.

🐳 Docker Image: ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-67a9cf7

📦 Download & Test Locally:

📁 Download Docker Image Artifact (look for wrongsecrets-preview-pr-2438)
Load and run the image:

# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview

🚀 Alternative - Pull from Registry:

docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-67a9cf7
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-67a9cf7

Then visit: http://localhost:8080

📝 Changes in this PR:
- src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge61.java
- src/main/java/org/owasp/wrongsecrets/challenges/docker/challenge61/TelegramWebhookController.java

Visual diff screenshots will be available shortly...

_{Preview built by GitHub Actions}

github-actions · 2026-03-07T04:24:00Z

🚨 Version Sync Issue Detected

The versions in your Dockerfiles don't match the version in pom.xml.

🔧 To fix this automatically:

./scripts/sync-versions.sh
git add Dockerfile Dockerfile.web
git commit -m "Sync versions with pom.xml"

📋 Current status:

The validate-versions.sh script found mismatched versions
Please ensure all Docker build arguments match the Maven project version
This helps maintain consistency across all deployment methods

_{Automated version check by GitHub Actions}

github-actions · 2026-03-07T04:25:06Z

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2438

📄 What's included:

✅ All CSS, JavaScript, and static assets (embedded inline)
✅ Current styling and layout preview
✅ Images, icons, and UI components
✅ NEW: Generated HTML from Thymeleaf templates
- 🏠 Home/Welcome Page
- ℹ️ About Page
- 📊 Stats & Config Page
- 🤖 Challenge 57: LLM Security (Latest)
- 🧩 Challenge Example

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.

_{Static preview with Thymeleaf generation by GitHub Actions}

github-actions · 2026-03-07T04:26:00Z

📸 Visual Diff Ready!

Screenshots comparing your changes with the main branch are available:

📁 Download Visual Diff Artifacts

🖼️ Included screenshots:

pr-home.png vs main-home.png - Welcome page comparison
pr-about.png vs main-about.png - About page comparison
pr-challenge.png vs main-challenge.png - Challenge page comparison

🔍 How to review:

Download the artifact zip file
Extract and compare the pr-* and main-* images side by side
Look for visual differences in layout, styling, and content

💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily.

_{Visual diff generated by GitHub Actions • PR #2438}

github-actions · 2026-03-07T04:26:52Z

🔨 Preview Build Complete!

Your changes have been built and pushed to GitHub Container Registry.

🐳 Docker Image: ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-69c09e6

📦 Download & Test Locally:

📁 Download Docker Image Artifact (look for wrongsecrets-preview-pr-2438)
Load and run the image:

# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview

🚀 Alternative - Pull from Registry:

docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-69c09e6
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-69c09e6

Then visit: http://localhost:8080

📝 Changes in this PR:
- src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge61.java
- src/main/java/org/owasp/wrongsecrets/challenges/docker/challenge61/TelegramWebhookController.java

Visual diff screenshots will be available shortly...

_{Preview built by GitHub Actions}

github-actions · 2026-03-07T04:29:50Z

📸 Visual Diff Ready!

Screenshots comparing your changes with the main branch are available:

📁 Download Visual Diff Artifacts

🖼️ Included screenshots:

pr-home.png vs main-home.png - Welcome page comparison
pr-about.png vs main-about.png - About page comparison
pr-challenge.png vs main-challenge.png - Challenge page comparison

🔍 How to review:

Download the artifact zip file
Extract and compare the pr-* and main-* images side by side
Look for visual differences in layout, styling, and content

💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily.

_{Visual diff generated by GitHub Actions • PR #2438}

github-actions · 2026-03-07T04:29:58Z

🔨 Preview Build Complete!

Your changes have been built and pushed to GitHub Container Registry.

🐳 Docker Image: ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-68060b2

📦 Download & Test Locally:

📁 Download Docker Image Artifact (look for wrongsecrets-preview-pr-2438)
Load and run the image:

# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview

🚀 Alternative - Pull from Registry:

docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-68060b2
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-68060b2

Then visit: http://localhost:8080

📝 Changes in this PR:
- src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge61.java
- src/main/java/org/owasp/wrongsecrets/challenges/docker/challenge61/TelegramWebhookController.java

Visual diff screenshots will be available shortly...

_{Preview built by GitHub Actions}

github-actions · 2026-03-07T04:32:30Z

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2438

📄 What's included:

✅ All CSS, JavaScript, and static assets (embedded inline)
✅ Current styling and layout preview
✅ Images, icons, and UI components
✅ NEW: Generated HTML from Thymeleaf templates
- 🏠 Home/Welcome Page
- ℹ️ About Page
- 📊 Stats & Config Page
- 🤖 Challenge 57: LLM Security (Latest)
- 🧩 Challenge Example

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.

_{Static preview with Thymeleaf generation by GitHub Actions}

github-actions · 2026-03-07T04:33:44Z

📸 Visual Diff Ready!

Screenshots comparing your changes with the main branch are available:

📁 Download Visual Diff Artifacts

🖼️ Included screenshots:

pr-home.png vs main-home.png - Welcome page comparison
pr-about.png vs main-about.png - About page comparison
pr-challenge.png vs main-challenge.png - Challenge page comparison

🔍 How to review:

Download the artifact zip file
Extract and compare the pr-* and main-* images side by side
Look for visual differences in layout, styling, and content

💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily.

_{Visual diff generated by GitHub Actions • PR #2438}

github-actions · 2026-03-07T04:39:03Z

🔨 Preview Build Complete!

Your changes have been built and pushed to GitHub Container Registry.

🐳 Docker Image: ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-33f6d06

📦 Download & Test Locally:

📁 Download Docker Image Artifact (look for wrongsecrets-preview-pr-2438)
Load and run the image:

# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview

🚀 Alternative - Pull from Registry:

docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-33f6d06
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-33f6d06

Then visit: http://localhost:8080

📝 Changes in this PR:
- src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge61.java
- src/main/java/org/owasp/wrongsecrets/challenges/docker/challenge61/TelegramWebhookController.java

Visual diff screenshots will be available shortly...

_{Preview built by GitHub Actions}

github-actions · 2026-03-07T04:42:31Z

📸 Visual Diff Ready!

Screenshots comparing your changes with the main branch are available:

📁 Download Visual Diff Artifacts

🖼️ Included screenshots:

pr-home.png vs main-home.png - Welcome page comparison
pr-about.png vs main-about.png - About page comparison
pr-challenge.png vs main-challenge.png - Challenge page comparison

🔍 How to review:

Download the artifact zip file
Extract and compare the pr-* and main-* images side by side
Look for visual differences in layout, styling, and content

💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily.

_{Visual diff generated by GitHub Actions • PR #2438}

github-actions · 2026-03-07T04:53:00Z

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2438

📄 What's included:

✅ All CSS, JavaScript, and static assets (embedded inline)
✅ Current styling and layout preview
✅ Images, icons, and UI components
✅ NEW: Generated HTML from Thymeleaf templates
- 🏠 Home/Welcome Page
- ℹ️ About Page
- 📊 Stats & Config Page
- 🤖 Challenge 57: LLM Security (Latest)
- 🧩 Challenge Example

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.

_{Static preview with Thymeleaf generation by GitHub Actions}

github-actions · 2026-03-07T04:58:30Z

🔨 Preview Build Complete!

Your changes have been built and pushed to GitHub Container Registry.

🐳 Docker Image: ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-9668f6e

📦 Download & Test Locally:

📁 Download Docker Image Artifact (look for wrongsecrets-preview-pr-2438)
Load and run the image:

# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview

🚀 Alternative - Pull from Registry:

docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-9668f6e
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2438-9668f6e

Then visit: http://localhost:8080

📝 Changes in this PR:
- src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge61.java
- src/main/java/org/owasp/wrongsecrets/challenges/docker/challenge61/TelegramWebhookController.java

Visual diff screenshots will be available shortly...

_{Preview built by GitHub Actions}

github-actions · 2026-03-07T05:01:59Z

📸 Visual Diff Ready!

Screenshots comparing your changes with the main branch are available:

📁 Download Visual Diff Artifacts

🖼️ Included screenshots:

pr-home.png vs main-home.png - Welcome page comparison
pr-about.png vs main-about.png - About page comparison
pr-challenge.png vs main-challenge.png - Challenge page comparison

🔍 How to review:

Download the artifact zip file
Extract and compare the pr-* and main-* images side by side
Look for visual differences in layout, styling, and content

💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily.

_{Visual diff generated by GitHub Actions • PR #2438}

commjoen added 7 commits March 6, 2026 14:51

Fix Heroku deploy

7a0bcf1

Fix Heroku deploy

108fbe4

Fix Heroku deploy

98dc732

improve container and many more aspects

a3d280b

Fix Heroku deploy

8543cda

Fix Heroku deploy

7dbd2ba

Fixing arcane deployments

3176323

commjoen requested a review from bendehaan as a code owner March 6, 2026 21:59

commjoen temporarily deployed to github-pages March 6, 2026 21:59 — with GitHub Actions Inactive

Initial plan

8328577

Copilot AI mentioned this pull request Mar 7, 2026

[WIP] Improve challenge61 and optimize Heroku CDS usage #2439

Merged

5 tasks

Copilot AI and others added 2 commits March 7, 2026 04:12

Fix CI failures: restore password property, fix CRLF injection, fix D…

d5fb3d8

…ockerfile versions Co-authored-by: commjoen <1457214+commjoen@users.noreply.github.com>

Merge pull request #2439 from OWASP/copilot/sub-pr-2438

3b9a481

[WIP] Improve challenge61 and optimize Heroku CDS usage

commjoen temporarily deployed to github-pages March 7, 2026 04:15 — with GitHub Actions Inactive

commjoen changed the title ~~Improve challenge61~~ Improve challenge61 and heroku cds usage Mar 7, 2026

[pre-commit.ci lite] apply automatic fixes

ede317f

pre-commit-ci-lite bot temporarily deployed to github-pages March 7, 2026 04:17 Inactive

fix versions

2201590

commjoen temporarily deployed to github-pages March 7, 2026 04:23 — with GitHub Actions Inactive

fix missing versions

c415a4d

commjoen temporarily deployed to github-pages March 7, 2026 04:31 — with GitHub Actions Inactive

update javadoc

9aab93d

commjoen deployed to github-pages March 7, 2026 04:51 — with GitHub Actions View deployment

commjoen merged commit 7e6ff7f into master Mar 7, 2026
21 of 22 checks passed

commjoen deleted the improve_challenge61 branch March 7, 2026 05:02

Uh oh!

Conversation

commjoen commented Mar 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What kind of changes does this PR include?

Description

Relations

References

Checklist:

Uh oh!

github-actions bot commented Mar 6, 2026

Uh oh!

github-actions bot commented Mar 6, 2026

Uh oh!

commjoen commented Mar 7, 2026

Uh oh!

Copilot AI commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

commjoen commented Mar 6, 2026 •

edited

Loading