From 681a20a7c37a1e06b7cb2cb00bec53d4b984c0c0 Mon Sep 17 00:00:00 2001 From: thegoodcrumpets Date: Wed, 4 Dec 2019 12:21:19 +0100 Subject: [PATCH] In the migration to Spring 2, this method lost its get mapping to the IDOR/profile url,breaking the javascript call to that address. (#720) thanks! --- .../main/java/org/owasp/webgoat/idor/IDORViewOwnProfile.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webgoat-lessons/idor/src/main/java/org/owasp/webgoat/idor/IDORViewOwnProfile.java b/webgoat-lessons/idor/src/main/java/org/owasp/webgoat/idor/IDORViewOwnProfile.java index 415c9c9fec..1db35b9548 100644 --- a/webgoat-lessons/idor/src/main/java/org/owasp/webgoat/idor/IDORViewOwnProfile.java +++ b/webgoat-lessons/idor/src/main/java/org/owasp/webgoat/idor/IDORViewOwnProfile.java @@ -36,7 +36,7 @@ public class IDORViewOwnProfile { @Autowired UserSessionData userSessionData; - @GetMapping(path = "IDOR/own", produces = {"application/json"}) + @GetMapping(path = {"IDOR/own", "IDOR/profile"}, produces = {"application/json"}) @ResponseBody public Map invoke() { Map details = new HashMap<>();