Release 1.10.3: Bugfixes

OWASP · Feb 24, 2025 · 405e5c4 · 405e5c4
1 parent e7dc216
commit 405e5c4
Show file tree

Hide file tree

Showing 14 changed files with 49 additions and 49 deletions.
diff --git a/.github/scripts/.bash_history b/.github/scripts/.bash_history
@@ -347,7 +347,7 @@ rm -rf jdk-18_linux-x64_bin.deb
 git rebase -i main
 git rebase -i master
 git stash
-export tempPassword="Ep6TYwbIcR8bFLeSkf06BUz+11yLxF0M9TdbX6ju8qM="
+export tempPassword="yx6XyxAQb/czcmUFXDoYFszPCaB5nEZTsZ/tdv5EEVs="
 mvn run tempPassword
 k6
 npx k6

diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,7 @@
 FROM bellsoft/liberica-openjre-debian:23.0.1-13-cds AS builder
 WORKDIR /builder
 
-ARG argBasedVersion="1.10.2"
+ARG argBasedVersion="1.10.3"
 
 COPY --chown=wrongsecrets target/wrongsecrets-${argBasedVersion}-SNAPSHOT.jar application.jar
 RUN java -Djarmode=tools -jar application.jar extract --layers --destination extracted

diff --git a/Dockerfile.web b/Dockerfile.web
@@ -1,5 +1,5 @@
-FROM jeroenwillemsen/wrongsecrets:1.10.2-CDS-no-vault
-ARG argBasedVersion="1.10.2-no-vault"
+FROM jeroenwillemsen/wrongsecrets:1.10.3-no-vault
+ARG argBasedVersion="1.10.3-no-vault"
 ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp"
 ARG CTF_ENABLED=false
 ARG HINTS_ENABLED=true

diff --git a/aws/k8s/secret-challenge-vault-deployment.yml b/aws/k8s/secret-challenge-vault-deployment.yml
@@ -58,7 +58,7 @@ spec:
             volumeAttributes:
               secretProviderClass: "wrongsecrets-aws-secretsmanager"
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.10.3-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           command: ["/bin/sh"]

diff --git a/azure/k8s/secret-challenge-vault-deployment.yml.tpl b/azure/k8s/secret-challenge-vault-deployment.yml.tpl
@@ -61,7 +61,7 @@ spec:
             volumeAttributes:
               secretProviderClass: "azure-wrongsecrets-vault"
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.10.3-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           command: ["/bin/sh"]

diff --git a/fly.toml b/fly.toml
@@ -8,7 +8,7 @@ app = "wrongsecrets"
 primary_region = "ams"
 
 [build]
-  image = "docker.io/jeroenwillemsen/wrongsecrets:1.10.2-no-vault"
+  image = "docker.io/jeroenwillemsen/wrongsecrets:1.10.3-no-vault"
 
 [env]
   K8S_ENV = "Fly(Docker)"

diff --git a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl
@@ -58,7 +58,7 @@ spec:
             volumeAttributes:
               secretProviderClass: "wrongsecrets-gcp-secretsmanager"
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.10.3-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           command: ["/bin/sh"]

diff --git a/js/index.js b/js/index.js
@@ -1,5 +1,5 @@
 
  function secret() {
- var password = "cxsWHCc=" + 9 + "3bmI" + 6 + "2FA=" + 2 + "vYuX" + 7;
+ var password = "Zm1GbcA=" + 9 + "E39d" + 6 + "52E=" + 2 + "A3hS" + 7;
  return password;
  }
diff --git a/k8s/secret-challenge-deployment.yml b/k8s/secret-challenge-deployment.yml
@@ -28,7 +28,7 @@ spec:
         runAsGroup: 2000
         fsGroup: 2000
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.10.2-no-vault
+        - image: jeroenwillemsen/wrongsecrets:1.10.3-no-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           ports:

diff --git a/k8s/secret-challenge-vault-deployment.yml b/k8s/secret-challenge-vault-deployment.yml
@@ -50,7 +50,7 @@ spec:
           type: RuntimeDefault
       serviceAccountName: vault
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.10.3-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           command: ["/bin/sh"]

diff --git a/okteto/k8s/secret-challenge-ctf-deployment.yml b/okteto/k8s/secret-challenge-ctf-deployment.yml
@@ -28,7 +28,7 @@ spec:
         runAsGroup: 2000
         fsGroup: 2000
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.10.2-no-vault
+        - image: jeroenwillemsen/wrongsecrets:1.10.3-no-vault
           name: secret-challenge-ctf
           imagePullPolicy: IfNotPresent
           securityContext:

diff --git a/okteto/k8s/secret-challenge-deployment.yml b/okteto/k8s/secret-challenge-deployment.yml
@@ -28,7 +28,7 @@ spec:
         runAsGroup: 2000
         fsGroup: 2000
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.10.2-no-vault
+        - image: jeroenwillemsen/wrongsecrets:1.10.3-no-vault
           name: secret-challenge
           imagePullPolicy: IfNotPresent
           securityContext:

diff --git a/pom.xml b/pom.xml
@@ -11,7 +11,7 @@
 
   <groupId>org.owasp</groupId>
   <artifactId>wrongsecrets</artifactId>
-  <version>1.10.2-SNAPSHOT</version>
+  <version>1.10.3-SNAPSHOT</version>
 
   <name>OWASP WrongSecrets</name>
   <description>Examples with how to not use secrets</description>

diff --git a/src/main/resources/templates/about.html b/src/main/resources/templates/about.html