Skip to content

[WIP] Improve challenge61 and optimize Heroku CDS usage#2439

Merged
commjoen merged 2 commits intoimprove_challenge61from
copilot/sub-pr-2438
Mar 7, 2026
Merged

[WIP] Improve challenge61 and optimize Heroku CDS usage#2439
commjoen merged 2 commits intoimprove_challenge61from
copilot/sub-pr-2438

Conversation

Copy link
Contributor

Copilot AI commented Mar 7, 2026

  • Identify failing CI checks
  • Fix application.properties: restore `****** that was accidentally removed (fixes test failures, build-preview, DAST ZAP)
  • Fix CRLF injection vulnerability in TelegramWebhookController.java (fixes SpotBugs failure)
  • Fix version mismatch in Dockerfile and Dockerfile.web (fixes version-check failure)
  • CodeQL security check: no alerts found

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

…ockerfile versions

Co-authored-by: commjoen <1457214+commjoen@users.noreply.github.com>
@github-actions
Copy link

github-actions bot commented Mar 7, 2026

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2439

📄 What's included:

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.


Static preview with Thymeleaf generation by GitHub Actions

@commjoen commjoen marked this pull request as ready for review March 7, 2026 04:15
@commjoen commjoen merged commit 3b9a481 into improve_challenge61 Mar 7, 2026
4 checks passed
@commjoen commjoen deleted the copilot/sub-pr-2438 branch March 7, 2026 04:15
Copilot stopped work on behalf of commjoen due to an error March 7, 2026 04:15
@github-actions
Copy link

github-actions bot commented Mar 7, 2026

🔨 Preview Build Complete!

Your changes have been built and pushed to GitHub Container Registry.

🐳 Docker Image: ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2439-a577e5e

📦 Download & Test Locally:

  1. 📁 Download Docker Image Artifact (look for wrongsecrets-preview-pr-2439)
  2. Load and run the image:
# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview

🚀 Alternative - Pull from Registry:

docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2439-a577e5e
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2439-a577e5e

Then visit: http://localhost:8080

📝 Changes in this PR:
- src/main/java/org/owasp/wrongsecrets/challenges/docker/challenge61/TelegramWebhookController.java

Visual diff screenshots will be available shortly...


Preview built by GitHub Actions

@github-actions
Copy link

github-actions bot commented Mar 7, 2026

📸 Visual Diff Ready!

Screenshots comparing your changes with the main branch are available:

📁 Download Visual Diff Artifacts

🖼️ Included screenshots:

  • pr-home.png vs main-home.png - Welcome page comparison
  • pr-about.png vs main-about.png - About page comparison
  • pr-challenge.png vs main-challenge.png - Challenge page comparison

🔍 How to review:

  1. Download the artifact zip file
  2. Extract and compare the pr-* and main-* images side by side
  3. Look for visual differences in layout, styling, and content

💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily.


Visual diff generated by GitHub Actions • PR #2439

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants