[OWASP-WEBGOAT]C# conversion fun in webgoat.net
Jeff Williams @ Aspect
jeff.williams at aspectsecurity.com
Mon Aug 4 21:50:58 EDT 2003
WebGoat only uses a very small subset of ECS -- basically body, form, table, tr, td, and a few kinds of form fields. I don't think it would be too hard to port the pieces used. But the System.Web.UI.HtmlControls sounds real promising.
--Jeff
----- Original Message -----
From: Andrew van der Stock
To: 'Jeff Williams @ Aspect' ; 'Mark Curphey' ; 'Bruce Mayhew' ; 'Harbar, Spencer' ; owasp-webgoat at lists.sourceforge.net
Cc: 'Tim Aranki'
Sent: Monday, August 04, 2003 9:04 PM
Subject: [OWASP-WEBGOAT]C# conversion fun in webgoat.net
Hi guys,
I've been working on conversion of the goat using the source Mark provided
to me last week.
We have a small problem in that the code makes extensive use of Jakarta
Element Construction Set, a nice method to do markup without using dropouts
to HTML source (a la PHP or old ASP).
http://jakarta.apache.org/ecs/
However, it is *everywhere* through the code, and it uses various subclasses
such as IMG and so on.
There's three alternatives:
* port ECS (Hard(TM))
* develop an alternative lightweight framework that is good enough
* find a way to emulate it so a global search and replace will do the job.
The right way? I don't know. I think it'll be faster to work on a hack in
.NET to emulate it, but I'd be interested in your feedback.
Thanks,
Andrew
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
OWASP-WEBGOAT mailing list
OWASP-WEBGOAT at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/owasp-webgoat
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.owasp.org/pipermail/owasp-webgoat/attachments/20030804/eeb41fc8/attachment.html
More information about the Owasp-webgoat
mailing list