Commits

Commits on May 29, 2021

adding ShiftLeft GitHub action
ShiftLeft
committedMay 29, 2021

Commits on Dec 1, 2020

Upgrade a few dependencies in pom.xml. Add some missing header/license
davewichers
committedDec 1, 2020

Commits on Nov 19, 2020

Fix some errors in the HTML generated for the scorecards. Add some
davewichers
committedNov 19, 2020

Commits on Nov 4, 2020

Upgrade various dependencies, including 2 w/known CVEs. Add new
davewichers
committedNov 4, 2020

Commits on Oct 2, 2020

Update the .html files for test cases that use AJAX to submit the
davewichers
committedOct 2, 2020
Tweak to Content Security policy settings in HTTPResponseHeaderFilter.java as more inline JavaScript was found that was being blocked.
davewichers
committedOct 2, 2020

Commits on Sep 15, 2020

Add scorecard generator for free DAST tool Wapiti.
davewichers
committedSep 15, 2020

Commits on Sep 14, 2020

Add Semgrep scorecard generator based on contribution from: Nacho Guisado Obregón
davewichers
committedSep 14, 2020

Commits on Sep 10, 2020

Add one more vulnerability type to BurpPro reader translate to CWE method.
davewichers
committedSep 10, 2020

Commits on Aug 31, 2020

Merge pull request OWASP-Benchmark#114 from gitnachogo/VisualCodeGrepper
davewichers
committedAug 31, 2020

Commits on Aug 29, 2020

VisualCodeGrepper integration
gitnachogo
committedAug 29, 2020

Commits on Aug 26, 2020

Add missing content type header for test cases generating custom cookies in the
davewichers
committedAug 26, 2020

Commits on Aug 25, 2020

Add no-caching directives to all HTTPResponses. Add same-site=strict and HttpOnly
davewichers
committedAug 25, 2020
Eliminate some unintentional character set mismatch issues detected
davewichers
committedAug 25, 2020

Commits on Aug 21, 2020

Merge branch 'master' of https://github.com/OWASP/benchmark
davewichers
committedAug 21, 2020
Add tool type column to Summary of Results by Tool table on
davewichers
committedAug 21, 2020

Commits on Aug 14, 2020

Merge pull request OWASP-Benchmark#112 from amitsharma2009/patch-4
davewichers
committedAug 14, 2020
Update runBenchmark_wSeeker.bat
dragon040
committedAug 14, 2020

Commits on Aug 13, 2020

Merge pull request OWASP-Benchmark#111 from amitsharma2009/patch-3
davewichers
committedAug 13, 2020
Update runBenchmark_wSeeker.sh
dragon040
committedAug 13, 2020
Merge pull request OWASP-Benchmark#110 from amitsharma2009/patch-1
davewichers
committedAug 13, 2020
Update runBenchmark_wSeeker.sh
dragon040
committedAug 13, 2020

Commits on Aug 12, 2020

Fix CSP headers just asded so styles, fonts, scripts load properly.
davewichers
committedAug 12, 2020
Create new HttpResponseFilter that adds CSP Response header to all
davewichers
committedAug 12, 2020
Add HttpHeaders security filter to web.xml to automatically set
davewichers
committedAug 12, 2020

Commits on Aug 11, 2020

Merge pull request OWASP-Benchmark#109 from kwwall/master
davewichers
committedAug 11, 2020
Delete extraneous .jsp files.
davewichers
committedAug 11, 2020

Commits on Jul 24, 2020

Minor cleanup and add comment.
kwwall
committedJul 24, 2020
Add missing mandatory properties file for ESAPI JUL.
kwwall
committedJul 24, 2020
Add new ESAPI 2.2.1.0 logger properties.
kwwall
committedJul 24, 2020
Update from EsAPI 2.2.0.0 to 2.2.1.0.
kwwall
committedJul 24, 2020
Add '-q' or '--quiet' option to quiet ESAPI logSpecial.
kwwall
committedJul 24, 2020

Commits on Jul 23, 2020

Disable AJP connector as it now requires additional security configuration
davewichers
committedJul 23, 2020
Add OpenAPI spec for OWASP Benchmark v1.2 to data folder. This is brand
davewichers
committedJul 23, 2020

Commits on Jun 30, 2020

Add ;charset=UTF-8 to ContentType of response for those test cases
davewichers
committedJun 30, 2020