Commits

Breadcrumbs

History for

onmaster

User selector

All users

All time

Commit history

Commits on Mar 11, 2021

• Assume lowercase headers for token-based Authorization

  simonirwin-r7

  committed
  ea56786

  Copy full SHA for ea56786

• Undo typo

  simonirwin-r7

  committed
  5c10ae5

  Copy full SHA for 5c10ae5

• Treat Authorization header as lowercase

  simonirwin-r7

  committed
  d91366c

  Copy full SHA for d91366c

Commits on Apr 22, 2015

• Add rest API tests.

  nchervyakov

  committed
  e6ed733

  Copy full SHA for e6ed733

• Add AMF CouponService tests.

  nchervyakov

  committed
  a47457a

  Copy full SHA for a47457a

Commits on Mar 24, 2015

• Add the "contact us" page to the android app.

  nchervyakov

  committed
  60dd234

  Copy full SHA for 60dd234

Commits on Feb 16, 2015

• Add status 400 Bad Request to invalid profile form submission.

  nchervyakov

  committed
  cd8b982

  Copy full SHA for cd8b982

• Add profile editing XSS vulns to My account page.

  nchervyakov

  committed
  e1cec61

  Copy full SHA for e1cec61

Commits on Feb 11, 2015

• Fix stored XSS in the account editor.

  nchervyakov

  committed
  4746589

  Copy full SHA for 4746589

• Fix vuln config editor template (vulnerable element header)

  nchervyakov

  committed
  e425647

  Copy full SHA for e425647

• Add improvements to vuln config editor UI.

  Show description for bcc1da0
  nchervyakov

  committed
  bcc1da0

  Copy full SHA for bcc1da0

• Add additional input checks for the Cart Service.

  nchervyakov

  committed
  b7d5129

  Copy full SHA for b7d5129

Commits on Feb 10, 2015

• Add Return Url for admin login page

  nchervyakov

  committed
  b2c3a87

  Copy full SHA for b2c3a87

• Inject path params vulnerabilities in wishlist.

  nchervyakov

  committed
  7400abd

  Copy full SHA for 7400abd

• Some fixes for Referer and Stored XSS vulnerabilities.

  nchervyakov

  committed
  07223a6

  Copy full SHA for 07223a6

Commits on Feb 9, 2015

• Add request path param as a source of vulnerability values

  nchervyakov

  committed
  6cfc6bb

  Copy full SHA for 6cfc6bb

• Fix some bugs in the cart subsystem.

  nchervyakov

  committed
  2028b15

  Copy full SHA for 2028b15

• Refactor Twitter auth controller

  nchervyakov

  committed
  289cac4

  Copy full SHA for 289cac4

• Fix bestprice controller.

  Show description for 8eb4894
  nchervyakov

  committed
  8eb4894

  Copy full SHA for 8eb4894

Commits on Feb 6, 2015

• Add CSRF to bestprice

  nchervyakov

  committed
  a040a4a

  Copy full SHA for a040a4a

• Some fixes

  nchervyakov

  committed
  cc18d44

  Copy full SHA for cc18d44

• Fix session id processing.

  nchervyakov

  committed
  a8facb8

  Copy full SHA for a8facb8

• Fix some bugs.

  nchervyakov

  committed
  d74f3f7

  Copy full SHA for d74f3f7

• Merge from vuln_2

  nchervyakov

  committed
  19eee6a

  Copy full SHA for 19eee6a

Commits on Dec 8, 2014

• Add Content-Length header to hackazon responses, and a possible drop-in replacement to Android HTTP client

  nchervyakov

  committed
  f905a94

  Copy full SHA for f905a94

Commits on Dec 4, 2014

• Fix checkout placeOrder step.

  nchervyakov

  committed
  746bd67

  Copy full SHA for 746bd67

Commits on Dec 1, 2014

• Fix making many copies of shipping and billing addresses in checkout.

  nchervyakov

  committed
  6247652

  Copy full SHA for 6247652

Commits on Nov 24, 2014

• Some fixes and additions

  nchervyakov

  committed
  55125c7

  Copy full SHA for 55125c7

Commits on Nov 21, 2014

• Update Android app:

  Show description for f180e62
  nchervyakov

  committed
  f180e62

  Copy full SHA for f180e62

Commits on Nov 20, 2014

• switching back to data={json string}

  

  dk

  committed
  dd139f5

  Copy full SHA for dd139f5

• typo change

  

  dk

  committed
  9e6b1bf

  Copy full SHA for 9e6b1bf

• trying as raw json again

  

  dk

  committed
  4a374bd

  Copy full SHA for 4a374bd

• Trying to make the site vulnerable again

  

  dk

  committed
  ecb423c

  Copy full SHA for ecb423c

• Trying to make the site vulnerable again

  

  dk

  committed
  b73a960

  Copy full SHA for b73a960

• Change contact page to send raw JSON in response

  nchervyakov

  committed
  49c43ad

  Copy full SHA for 49c43ad