Skip to content

Commit

Permalink
Improve several descriptions
Browse files Browse the repository at this point in the history
  • Loading branch information
k-tamura committed Apr 12, 2017
1 parent 1167428 commit 77c64b7
Show file tree
Hide file tree
Showing 4 changed files with 10 additions and 10 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ protected void service(HttpServletRequest req, HttpServletResponse res) throws S
bodyHtml.append("<form action=\"mojibake\" method=\"post\">");
bodyHtml.append(MessageUtils.getMsg("description.capitalize.string", locale));
bodyHtml.append("<br><br>");
bodyHtml.append(MessageUtils.getMsg("label.name", locale) + ": ");
bodyHtml.append(MessageUtils.getMsg("label.string", locale) + ": ");
bodyHtml.append("<input type=\"text\" name=\"string\" size=\"100\" maxlength=\"100\">");
bodyHtml.append("<br><br>");
bodyHtml.append("<input type=\"submit\" value=\"" + MessageUtils.getMsg("label.submit", locale) + "\">");
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ protected void service(HttpServletRequest req, HttpServletResponse res) throws S
bodyHtml.append("<form action=\"xss\" method=\"post\">");
bodyHtml.append(MessageUtils.getMsg("description.reverse.string", locale));
bodyHtml.append("<br><br>");
bodyHtml.append(MessageUtils.getMsg("label.name", locale) + ": ");
bodyHtml.append(MessageUtils.getMsg("label.string", locale) + ": ");
bodyHtml.append("<input type=\"text\" name=\"string\" size=\"100\" maxlength=\"100\">");
bodyHtml.append("<br><br>");
bodyHtml.append("<input type=\"submit\" value=\"" + MessageUtils.getMsg("label.submit", locale) + "\">");
Expand Down
8 changes: 4 additions & 4 deletions src/main/resources/messages_en.properties
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
description.access.history=Access history in this page (The latest 15 records).
description.capitalize.string=If you enter a string, then the capitalized string is shown.
description.capitalize.string=If you enter a string, then the capitalized string is shown. For example: capitalize string -> Capitalize String
description.design.page=You can change design of this page. Please click one of the links below and change \
this page to your style.
description.design.test=Please click on one of the links below.
Expand Down Expand Up @@ -110,12 +110,12 @@ msg.note.slow.regular.expression=If you enter string to <code>aaaaaaaaaaaaaaaaaa
msg.note.slow.string.plus.operation=If you enter a large number then the processing will take several tens of seconds because the string is created by "+" (plus) operator.
msg.note.sql.deadlock=If you open two windows (or tabs) and select "asc" and click the "update" button on one window immediately after you select "desc" \
and click the "update" button on the other, then dead lock occurs in database.
msg.note.sql.injection=You can login with <code>Mark</code> and <code>password</code>.\
msg.note.sql.injection=You can see a secret number if you enter <code>Mark</code> and <code>password</code>.\
You can see other users information if you enter password to <code>' OR '1'='1</code>
msg.note.ldap.injection=You can login with <code>Mark</code> and <code>password</code>.\
msg.note.ldap.injection=You can see a secret number if you enter <code>Mark</code> and <code>password</code>.\
You can see other users information if you enter name to <code>*)(|(objectClass=*</code> and password to <code>aaaaaaa)</code>
msg.note.mail.header.injection=If you change the type attribute of the subject field's input tag to textarea by browser's developer mode and set it to <code>[subject][line break]Bcc: [a mail address]</code>, then you can send a mail to the address.
msg.note.mojibake=Mojibake occurs if you enter name in a multibyte language
msg.note.mojibake=Mojibake occurs if you enter a multi-byte string.
msg.note.null.byte.injection=If using Java earlier than version 1.7.0_40 and you add <code>fileName=../WEB-INF/web.xml%00</code> to the query string, you can download a file which includes the content of web.xml.
msg.note.open.redirect=You can login with <code>Mark</code> and <code>password</code>.\
If you add <code>goto=[an URL of a malicious site]</code> to the query string, you can redirect to the malicious site.
Expand Down
8 changes: 4 additions & 4 deletions src/main/resources/messages_ja.properties
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
description.access.history=\u3053\u306e\u30da\u30fc\u30b8\u306e\u30a2\u30af\u30bb\u30b9\u5c65\u6b74 (\u6700\u65b0\u306e15\u4ef6)
description.capitalize.string=\u6587\u5b57\u5217\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6587\u5b57\u5217\u306e\u5148\u982d\u3092\u5927\u6587\u5b57\u306b\u3057\u3066\u8868\u793a\u3057\u307e\u3059\u3002
description.capitalize.string=\u6587\u5b57\u5217\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u5148\u982d\u3092\u5927\u6587\u5b57\u306b\u3057\u3066\u8868\u793a\u3057\u307e\u3059\u3002\u4f8b) capitalize string -> Capitalize String
description.design.page=\u3053\u306e\u30da\u30fc\u30b8\u3067\u306f\u3001\u30c7\u30b6\u30a4\u30f3\u306e\u5fae\u8abf\u6574\u3092\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u4ee5\u4e0b\u306e\u3044\u305a\u308c\u304b\u306e\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3057\u3066\u3001\
\u3053\u306e\u30da\u30fc\u30b8\u3092\u304a\u597d\u307f\u306e\u30b9\u30bf\u30a4\u30eb\u306b\u5909\u66f4\u3057\u3066\u4e0b\u3055\u3044\u3002
description.design.test=\u4ee5\u4e0b\u306e\u3044\u305a\u308c\u304b\u306e\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3057\u3066\u4e0b\u3055\u3044\u3002
Expand Down Expand Up @@ -107,12 +107,12 @@ msg.note.not.use.ext.db=\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u30b3\u30cd\u30af\u
msg.note.positive.number=63\u4ee5\u4e0a\u306e\u6570\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304c\u767a\u751f\u3057\u307e\u3059\u3002
msg.note.sql.deadlock=2\u3064\u306e\u30a6\u30a4\u30f3\u30c9\u30a6\u307e\u305f\u306f\u30bf\u30d6\u3092\u958b\u304d\u3001\u4e00\u65b9\u3067\u300c\u964d\u9806\u300d\u3092\u9078\u629e\u3057\u3066\u300c\u66f4\u65b0\u300d\u30dc\u30bf\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3057\u305f\u76f4\u5f8c\u306b\u3001\u3082\u3046\u4e00\u65b9\u3067\u300c\u6607\u9806\u300d\u3092\u9078\u629e\u3057\u3066\
\u300c\u66f4\u65b0\u300d\u30dc\u30bf\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3067\u30c7\u30c3\u30c9\u30ed\u30c3\u30af\u304c\u767a\u751f\u3057\u307e\u3059\u3002
msg.note.sql.injection=<code>Mark</code> \u3068 <code>password</code>\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u307e\u3059\u3002\
msg.note.sql.injection=<code>Mark</code> \u3068 <code>password</code>\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6697\u8a3c\u756a\u53f7\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002\
\u30d1\u30b9\u30ef\u30fc\u30c9\u306b <code>' OR '1'='1</code> \u3092\u5165\u529b\u3059\u308b\u3068\u3001\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u60c5\u5831\u304c\u8868\u793a\u3067\u304d\u307e\u3059\u3002
msg.note.ldap.injection=<code>Mark</code> \u3068 <code>password</code>\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u307e\u3059\u3002\
msg.note.ldap.injection=<code>Mark</code> \u3068 <code>password</code>\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6697\u8a3c\u756a\u53f7\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002\
\u540d\u524d\u306b <code>*)(|(objectClass=*</code>\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u306b <code>aaaaaaa)</code> \u3092\u5165\u529b\u3059\u308b\u3068\u3001\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u60c5\u5831\u304c\u8868\u793a\u3067\u304d\u307e\u3059\u3002
msg.note.mail.header.injection=\u30d6\u30e9\u30a6\u30b6\u306e\u958b\u767a\u8005\u30e2\u30fc\u30c9\u3067\u4ef6\u540d\u306einput\u30bf\u30b0\u306etype\u5c5e\u6027\u3092textarea\u306b\u5909\u66f4\u3057\u3001\u300c[\u4efb\u610f\u4ef6\u540d][\u6539\u884c]Bcc: [\u4efb\u610f\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9]\u300d\u3092\u5165\u529b\u3057\u3066\u9001\u4fe1\u3059\u308b\u3068\u3001[\u4efb\u610f\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9]\u306b\u30e1\u30fc\u30eb\u3092\u9001\u4fe1\u3067\u304d\u307e\u3059\u3002
msg.note.mojibake=\u540d\u524d\u306b\u65e5\u672c\u8a9e\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6587\u5b57\u5316\u3051\u304c\u767a\u751f\u3057\u307e\u3059\u3002
msg.note.mojibake=\u6587\u5b57\u5217\u306b\u65e5\u672c\u8a9e\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6587\u5b57\u5316\u3051\u304c\u767a\u751f\u3057\u307e\u3059\u3002
msg.note.null.byte.injection=\u30d0\u30fc\u30b8\u30e7\u30f31.7.0_40\u3088\u308a\u524d\u306eJava\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u3001\u30af\u30a8\u30ea\u30b9\u30c8\u30ea\u30f3\u30b0\u306b <code>fileName=../WEB-INF/web.xml%00</code> \u3092\u4ed8\u52a0\u3059\u308b\u3068\u3001web.xml\u306e\u5185\u5bb9\u3092\u542b\u3080\u30d5\u30a1\u30a4\u30eb\u304c\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3067\u304d\u307e\u3059\u3002
msg.note.slow.regular.expression=\u6587\u5b57\u5217\u306b <code>aaaaaaaaaaaaaaaaaaaaaaaaaaaaa\u3042</code> \u3092\u5165\u529b\u3059\u308b\u3068\u3001\u69cb\u6587\u89e3\u6790\u306b\u6570\u5341\u79d2\u304b\u308a\u307e\u3059\u3002<br> \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\u6587\u5b57\u5217\u306b <code>aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\u3042</code> \u3092\u5165\u529b\u3059\u308b\u3068...
Expand Down

0 comments on commit 77c64b7

Please sign in to comment.