v8.2.0

Version 8.2.0

New functionality

• Add new zip slip lesson (part of path traversal)
• SQL lessons are now separate for each user, database are now per user and no longer shared across users
• Moved to Java 15 & Spring Boot 2.4 & moved to JUnit 5

Bug fixes

• #974 SQL injection Intro 5 not solvable
• #962 SQL-Lesson 5 (Advanced) Solvable with wrong anwser
• #961 SQl-Injection lesson 4 not deleting created row
• #949 Challenge: Admin password reset always solvable
• #923 - Upgrade to Java 15
• #922 - Vulnerable components lesson
• #891 - Update the OWASP website with the new all-in-one Docker container
• #844 - Suggestion: Update navigation
• #843 - Bypass front-end restrictions: Field restrictions - confusing text in form
• #841 - XSS - Reflected XSS confusing instruction and success messages
• #839 - SQL Injection (mitigation) Order by clause confusing
• #838 - SQL mitigation (filtering) can only be passed by updating table

Contributors

Special thanks to the following contributors providing us with a pull request:

• nicholas-quirk
• VijoPlays
• aolle
• trollingHeifer
• maximmasiutin
• toshihue
• avivmu
• KellyMarchewa
• NatasG
• gabe-sky