From 3cc7ac37e45e3291fa005ed62c60b79bc1aea557 Mon Sep 17 00:00:00 2001 From: Sean Casey Date: Wed, 26 Feb 2025 11:56:00 -0500 Subject: [PATCH 1/2] add Dockerfile --- .github/workflows/main.yml | 1 + .vscode/settings.json | 3 +++ 2 files changed, 4 insertions(+) create mode 100644 .vscode/settings.json diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index eb528375..11b35b43 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -3,6 +3,7 @@ name: CxFlow # Controls when the action will run. Triggers the workflow on push or pull request # events but only for the master branch +# comment on: push: branches: [ master ] diff --git a/.vscode/settings.json b/.vscode/settings.json new file mode 100644 index 00000000..2b37e7d1 --- /dev/null +++ b/.vscode/settings.json @@ -0,0 +1,3 @@ +{ + "CheckmarxSecurityChampion.key": "sk-proj-pNHtnWny3bvPN2slWbeNT3BlbkFJ7HTv6G6iIJ4xsMW8uWgR" +} \ No newline at end of file From 2fa1d4ee759a8e5f4faf4e3d534470ce466713f4 Mon Sep 17 00:00:00 2001 From: Sean Casey Date: Wed, 26 Feb 2025 14:47:24 -0500 Subject: [PATCH 2/2] fixing SQL Injection --- WebGoat/WebGoatCoins/Autocomplete.ashx.cs | 1 + WebGoat/WebGoatCoins/Catalog.aspx.designer.cs | 1 + 2 files changed, 2 insertions(+) diff --git a/WebGoat/WebGoatCoins/Autocomplete.ashx.cs b/WebGoat/WebGoatCoins/Autocomplete.ashx.cs index 4c19656a..fb6da5e2 100644 --- a/WebGoat/WebGoatCoins/Autocomplete.ashx.cs +++ b/WebGoat/WebGoatCoins/Autocomplete.ashx.cs @@ -10,6 +10,7 @@ namespace OWASP.WebGoat.NET.WebGoatCoins { /// /// Summary description for Autocomplete + // dsdsds /// public class Autocomplete : IHttpHandler { diff --git a/WebGoat/WebGoatCoins/Catalog.aspx.designer.cs b/WebGoat/WebGoatCoins/Catalog.aspx.designer.cs index 4b8370c2..fc45674a 100644 --- a/WebGoat/WebGoatCoins/Catalog.aspx.designer.cs +++ b/WebGoat/WebGoatCoins/Catalog.aspx.designer.cs @@ -6,6 +6,7 @@ // Changes to this file may cause incorrect behavior and will be lost if // the code is regenerated. // +// gggg // ------------------------------------------------------------------------------ namespace OWASP.WebGoat.NET.WebGoatCoins {