Closed
Description
For all lessons, whenever the user clicks "Java Source", the source is not displayed even though the Plugin Loader was successful in loading all plugins and the debug messages show successful lesson path identification under the target/plugin_extracted folder.
Tested with exec-jar
and mvn -pl webgoat-container tomcat7:runwar
015-10-27 21:47:51,634 DEBUG - HH Entering Session_id: 4AB1104AF1082C3208EC33BF1EC1B816
2015-10-27 21:47:51,634 WARN - HH Creating new WebSession
2015-10-27 21:47:51,638 INFO - Loading courses: /
2015-10-27 21:47:51,638 DEBUG - Loading plugins into cache
2015-10-27 21:47:51,914 DEBUG - Setting source file of lesson Bypass HTML Field Restrictions to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/BypassHtmlFieldRestrictions.java
2015-10-27 21:47:51,914 DEBUG - Setting source file of lesson Malicious Code to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/BlindScript.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson Blind String SQL Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/BlindStringSqlInjection.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson Blind Numeric SQL Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/BlindNumericSqlInjection.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson Using an Access Control Matrix to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/AccessControlMatrix.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson Database Backdoors to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/BackDoors.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson Insecure Client Storage to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ClientSideValidation.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson The CHALLENGE to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ChallengeScreen.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson LAB: Client Side Filtering to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ClientSideFiltering.java
2015-10-27 21:47:51,915 DEBUG - Setting source file of lesson Dangerous Use of Eval to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/DangerousEval.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson Shopping Cart Concurrency Flaw to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ConcurrencyCart.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson Basic Authentication to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/BasicAuthentication.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson Command Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/CommandInjection.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson CSRF Prompt By-Pass to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/CsrfPromptByPass.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson LAB: DOM-Based cross-site scripting to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/DOMXSS.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson Cross Site Request Forgery (CSRF) to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/CSRF.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson Denial of Service from Multiple Logins to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/DOS_Login.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson CSRF Token By-Pass to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/CsrfTokenByPass.java
2015-10-27 21:47:51,916 DEBUG - Setting source file of lesson Forced Browsing to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ForcedBrowsing.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson Goat Hills Financials to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/GoatHillsFinancial/ViewProfile.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson LAB: Cross Site Scripting to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/crosssitescripting/ViewProfile.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson Forgot Password to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ForgotPassword.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson LAB: DB Cross Site Scripting (XSS) to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/db_cross_site/UpdateProfile.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson LAB: DB SQL Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/dbsqlinjection/Login.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson Http Basics to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/HttpBasics.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson Insecure Login to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/InsecureLogin.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson Discover Clues in the HTML to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/HtmlClues.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson HTTPOnly Test to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/HttpOnly.java
2015-10-27 21:47:51,917 DEBUG - Setting source file of lesson How to create a Legacy Lesson to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/NewLegacyLesson.java
2015-10-27 21:47:51,918 DEBUG - Setting source file of lesson Log Spoofing to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/LogSpoofing.java
2015-10-27 21:47:51,918 DEBUG - Setting source file of lesson Malicious File Execution to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/MaliciousFileExecution.java
2015-10-27 21:47:51,918 DEBUG - Setting source file of lesson Multi Level Login 1 to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/MultiLevelLogin1.java
2015-10-27 21:47:51,918 DEBUG - Setting source file of lesson Multi Level Login 2 to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/MultiLevelLogin2.java
2015-10-27 21:47:51,918 DEBUG - Setting source file of lesson DOM Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/DOMInjection.java
2015-10-27 21:47:51,918 DEBUG - Setting source file of lesson Off-by-One Overflows to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/OffByOne.java
2015-10-27 21:47:51,942 DEBUG - Setting source file of lesson Phishing with XSS to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/Phishing.java
2015-10-27 21:47:51,942 DEBUG - Setting source file of lesson Password Strength to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/PasswordStrength.java
2015-10-27 21:47:51,942 DEBUG - Setting source file of lesson Bypass Client Side JavaScript Validation to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/JavaScriptValidation.java
2015-10-27 21:47:51,942 DEBUG - Setting source file of lesson Exploit Hidden Fields to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/HiddenFieldTampering.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Fail Open Authentication Scheme to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/FailOpenAuthentication.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Reflected XSS Attacks to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ReflectedXSS.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson How to work with WebGoat to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/HowToWork.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson JSON Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/JSONInjection.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Bypass a Path Based Access Control Scheme to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/PathBasedAccessControl.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Same Origin Policy Protection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/SameOriginPolicyProtection.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Remote Admin Access to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/RemoteAdminFlaw.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Session Fixation to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/SessionFixation.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Numeric SQL Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/SqlNumericInjection.java
2015-10-27 21:47:51,943 DEBUG - Setting source file of lesson Silent Transactions Attacks to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/SilentTransactions.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson String SQL Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/SqlStringInjection.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Create a SOAP Request to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/SoapRequest.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson LAB: SQL Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/sqlinjection/ViewProfile.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Web Service SQL Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/WsSqlInjection.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Exploit Unchecked Email to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/UncheckedEmail.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson WSDL Scanning to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/WSDLScanning.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson LAB: Role Based Access Control to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/rollbased/ViewProfile.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Hijack a Session to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/WeakSessionID.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson ZipBomb to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ZipBomb.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Stored XSS Attacks to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/StoredXss.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Web Service SAX Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/WsSAXInjection.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson XPATH Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/XPATHInjection.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Spoof an Authentication Cookie to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/WeakAuthenticationCookie.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Cross Site Tracing (XST) Attacks to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/TraceXSS.java
2015-10-27 21:47:51,944 DEBUG - Setting source file of lesson Thread Safety Problems to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/ThreadSafetyProblem.java
2015-10-27 21:47:51,945 DEBUG - Setting source file of lesson XML Injection to: /Users/dm/Workspaces/WebGoat/webgoat-container/target/webgoat-container-7.0-SNAPSHOT/plugin_extracted/org/owasp/webgoat/plugin/XMLInjection.java
2015-10-27 21:47:51,945 DEBUG - Loading files into cache, path: /
2015-10-27 21:47:51,947 DEBUG - Loading files into cache, path: /js/
2015-10-27 21:47:51,947 DEBUG - Loading files into cache, path: /js/jquery_form/
2015-10-27 21:47:51,947 DEBUG - Loading files into cache, path: /js/instructor/
2015-10-27 21:47:51,947 DEBUG - Loading files into cache, path: /js/goatApp/
2015-10-27 21:47:51,948 DEBUG - Loadin.......