package org.owasp.webgoat.plugin;
import org.apache.ecs.Element;
import org.apache.ecs.ElementContainer;
import org.apache.ecs.StringElement;
import org.apache.ecs.html.BR;
import org.apache.ecs.html.Input;
import org.owasp.webgoat.lessons.Category;
import org.owasp.webgoat.lessons.LessonAdapter;
import org.owasp.webgoat.session.ECSFactory;
import org.owasp.webgoat.session.WebSession;
import java.util.ArrayList;
import java.util.List;
/**
*
*
@created October 28, 2003
*/
public class HttpBasics extends LessonAdapter {
private final static String PERSON = "person";
/**
@return Description of the Return Value
*/
protected Element createContent(WebSession s) {
ElementContainer ec = new ElementContainer();
StringBuffer person = null;
try {
ec.addElement(new BR());
ec.addElement(new StringElement(getLabelManager().get("EnterYourName") + ": "));
person = new StringBuffer(s.getParser().getStringParameter(PERSON, ""));
person.reverse();
Input input = new Input(Input.TEXT, PERSON, person.toString());
ec.addElement(input);
Element b = ECSFactory.makeButton(getLabelManager().get("Go!"));
ec.addElement(b);
} catch (Exception e) {
s.setMessage("Error generating " + this.getClass().getName());
e.printStackTrace();
}
if (!person.toString().equals("") && getLessonTracker(s).getNumVisits() > 3) {
makeSuccess(s);
}
return (ec);
}
/**
@return The hints value
*/
public List getHints(WebSession s) {
List hints = new ArrayList();
hints.add("Type in your name and press 'go'");
hints.add("Turn on Show Parameters or other features");
hints.add("Try to intercept the request with OWASP ZAP");
hints.add("Press the Show Lesson Plan button to view a lesson summary");
hints.add("Press the Show Solution button to view a lesson solution");
return hints;
}
/**
protected Integer getDefaultRanking() {
return DEFAULT_RANKING;
}
protected Category getDefaultCategory() {
return Category.GENERAL;
}
/**
createContent方法传入一个参数s 是WebSession类型
//通过webSession获取参数解析器,并通过解析器获取(Gets the named parameter value as a String, with a default.)获取一个参数,如果获取不到默认为空字符串.
person = new StringBuffer(s.getParser().getStringParameter(PERSON, ""));
//反转字符串
person.reverse();
//创建一个Input标签,把刚才的值赋给这个Input
Input input = new Input(Input.TEXT, PERSON, person.toString());
ec.addElement(input);
//创建按钮
Element b = ECSFactory.makeButton(getLabelManager().get("Go!"));
ec.addElement(b);
大致是这个样子,望采纳