diff --git a/src/main/java/org/t246osslab/easybuggy/troubles/MojibakeServlet.java b/src/main/java/org/t246osslab/easybuggy/troubles/MojibakeServlet.java index 65cb79bf..23894a41 100644 --- a/src/main/java/org/t246osslab/easybuggy/troubles/MojibakeServlet.java +++ b/src/main/java/org/t246osslab/easybuggy/troubles/MojibakeServlet.java @@ -36,7 +36,7 @@ protected void service(HttpServletRequest req, HttpServletResponse res) throws S bodyHtml.append("
"); bodyHtml.append(MessageUtils.getMsg("description.capitalize.string", locale)); bodyHtml.append("

"); - bodyHtml.append(MessageUtils.getMsg("label.name", locale) + ": "); + bodyHtml.append(MessageUtils.getMsg("label.string", locale) + ": "); bodyHtml.append(""); bodyHtml.append("

"); bodyHtml.append(""); diff --git a/src/main/java/org/t246osslab/easybuggy/vulnerabilities/XSSServlet.java b/src/main/java/org/t246osslab/easybuggy/vulnerabilities/XSSServlet.java index ec64e340..1e2b2694 100644 --- a/src/main/java/org/t246osslab/easybuggy/vulnerabilities/XSSServlet.java +++ b/src/main/java/org/t246osslab/easybuggy/vulnerabilities/XSSServlet.java @@ -32,7 +32,7 @@ protected void service(HttpServletRequest req, HttpServletResponse res) throws S bodyHtml.append(""); bodyHtml.append(MessageUtils.getMsg("description.reverse.string", locale)); bodyHtml.append("

"); - bodyHtml.append(MessageUtils.getMsg("label.name", locale) + ": "); + bodyHtml.append(MessageUtils.getMsg("label.string", locale) + ": "); bodyHtml.append(""); bodyHtml.append("

"); bodyHtml.append(""); diff --git a/src/main/resources/messages_en.properties b/src/main/resources/messages_en.properties index 64a29a32..b56631c8 100644 --- a/src/main/resources/messages_en.properties +++ b/src/main/resources/messages_en.properties @@ -1,5 +1,5 @@ description.access.history=Access history in this page (The latest 15 records). -description.capitalize.string=If you enter a string, then the capitalized string is shown. +description.capitalize.string=If you enter a string, then the capitalized string is shown. For example: capitalize string -> Capitalize String description.design.page=You can change design of this page. Please click one of the links below and change \ this page to your style. description.design.test=Please click on one of the links below. @@ -110,12 +110,12 @@ msg.note.slow.regular.expression=If you enter string to aaaaaaaaaaaaaaaaaa msg.note.slow.string.plus.operation=If you enter a large number then the processing will take several tens of seconds because the string is created by "+" (plus) operator. msg.note.sql.deadlock=If you open two windows (or tabs) and select "asc" and click the "update" button on one window immediately after you select "desc" \ and click the "update" button on the other, then dead lock occurs in database. -msg.note.sql.injection=You can login with Mark and password.\ +msg.note.sql.injection=You can see a secret number if you enter Mark and password.\ You can see other users information if you enter password to ' OR '1'='1 -msg.note.ldap.injection=You can login with Mark and password.\ +msg.note.ldap.injection=You can see a secret number if you enter Mark and password.\ You can see other users information if you enter name to *)(|(objectClass=* and password to aaaaaaa) msg.note.mail.header.injection=If you change the type attribute of the subject field's input tag to textarea by browser's developer mode and set it to [subject][line break]Bcc: [a mail address], then you can send a mail to the address. -msg.note.mojibake=Mojibake occurs if you enter name in a multibyte language +msg.note.mojibake=Mojibake occurs if you enter a multi-byte string. msg.note.null.byte.injection=If using Java earlier than version 1.7.0_40 and you add fileName=../WEB-INF/web.xml%00 to the query string, you can download a file which includes the content of web.xml. msg.note.open.redirect=You can login with Mark and password.\ If you add goto=[an URL of a malicious site] to the query string, you can redirect to the malicious site. diff --git a/src/main/resources/messages_ja.properties b/src/main/resources/messages_ja.properties index d54dc9de..943ee59d 100644 --- a/src/main/resources/messages_ja.properties +++ b/src/main/resources/messages_ja.properties @@ -1,5 +1,5 @@ description.access.history=\u3053\u306e\u30da\u30fc\u30b8\u306e\u30a2\u30af\u30bb\u30b9\u5c65\u6b74 (\u6700\u65b0\u306e15\u4ef6) -description.capitalize.string=\u6587\u5b57\u5217\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6587\u5b57\u5217\u306e\u5148\u982d\u3092\u5927\u6587\u5b57\u306b\u3057\u3066\u8868\u793a\u3057\u307e\u3059\u3002 +description.capitalize.string=\u6587\u5b57\u5217\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u5148\u982d\u3092\u5927\u6587\u5b57\u306b\u3057\u3066\u8868\u793a\u3057\u307e\u3059\u3002\u4f8b) capitalize string -> Capitalize String description.design.page=\u3053\u306e\u30da\u30fc\u30b8\u3067\u306f\u3001\u30c7\u30b6\u30a4\u30f3\u306e\u5fae\u8abf\u6574\u3092\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u4ee5\u4e0b\u306e\u3044\u305a\u308c\u304b\u306e\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3057\u3066\u3001\ \u3053\u306e\u30da\u30fc\u30b8\u3092\u304a\u597d\u307f\u306e\u30b9\u30bf\u30a4\u30eb\u306b\u5909\u66f4\u3057\u3066\u4e0b\u3055\u3044\u3002 description.design.test=\u4ee5\u4e0b\u306e\u3044\u305a\u308c\u304b\u306e\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3057\u3066\u4e0b\u3055\u3044\u3002 @@ -107,12 +107,12 @@ msg.note.not.use.ext.db=\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u30b3\u30cd\u30af\u msg.note.positive.number=63\u4ee5\u4e0a\u306e\u6570\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304c\u767a\u751f\u3057\u307e\u3059\u3002 msg.note.sql.deadlock=2\u3064\u306e\u30a6\u30a4\u30f3\u30c9\u30a6\u307e\u305f\u306f\u30bf\u30d6\u3092\u958b\u304d\u3001\u4e00\u65b9\u3067\u300c\u964d\u9806\u300d\u3092\u9078\u629e\u3057\u3066\u300c\u66f4\u65b0\u300d\u30dc\u30bf\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3057\u305f\u76f4\u5f8c\u306b\u3001\u3082\u3046\u4e00\u65b9\u3067\u300c\u6607\u9806\u300d\u3092\u9078\u629e\u3057\u3066\ \u300c\u66f4\u65b0\u300d\u30dc\u30bf\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3067\u30c7\u30c3\u30c9\u30ed\u30c3\u30af\u304c\u767a\u751f\u3057\u307e\u3059\u3002 -msg.note.sql.injection=Mark \u3068 password\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u307e\u3059\u3002\ +msg.note.sql.injection=Mark \u3068 password\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6697\u8a3c\u756a\u53f7\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002\ \u30d1\u30b9\u30ef\u30fc\u30c9\u306b ' OR '1'='1 \u3092\u5165\u529b\u3059\u308b\u3068\u3001\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u60c5\u5831\u304c\u8868\u793a\u3067\u304d\u307e\u3059\u3002 -msg.note.ldap.injection=Mark \u3068 password\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u307e\u3059\u3002\ +msg.note.ldap.injection=Mark \u3068 password\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6697\u8a3c\u756a\u53f7\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002\ \u540d\u524d\u306b *)(|(objectClass=*\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u306b aaaaaaa) \u3092\u5165\u529b\u3059\u308b\u3068\u3001\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u60c5\u5831\u304c\u8868\u793a\u3067\u304d\u307e\u3059\u3002 msg.note.mail.header.injection=\u30d6\u30e9\u30a6\u30b6\u306e\u958b\u767a\u8005\u30e2\u30fc\u30c9\u3067\u4ef6\u540d\u306einput\u30bf\u30b0\u306etype\u5c5e\u6027\u3092textarea\u306b\u5909\u66f4\u3057\u3001\u300c[\u4efb\u610f\u4ef6\u540d][\u6539\u884c]Bcc: [\u4efb\u610f\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9]\u300d\u3092\u5165\u529b\u3057\u3066\u9001\u4fe1\u3059\u308b\u3068\u3001[\u4efb\u610f\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9]\u306b\u30e1\u30fc\u30eb\u3092\u9001\u4fe1\u3067\u304d\u307e\u3059\u3002 -msg.note.mojibake=\u540d\u524d\u306b\u65e5\u672c\u8a9e\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6587\u5b57\u5316\u3051\u304c\u767a\u751f\u3057\u307e\u3059\u3002 +msg.note.mojibake=\u6587\u5b57\u5217\u306b\u65e5\u672c\u8a9e\u3092\u5165\u529b\u3059\u308b\u3068\u3001\u6587\u5b57\u5316\u3051\u304c\u767a\u751f\u3057\u307e\u3059\u3002 msg.note.null.byte.injection=\u30d0\u30fc\u30b8\u30e7\u30f31.7.0_40\u3088\u308a\u524d\u306eJava\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u3001\u30af\u30a8\u30ea\u30b9\u30c8\u30ea\u30f3\u30b0\u306b fileName=../WEB-INF/web.xml%00 \u3092\u4ed8\u52a0\u3059\u308b\u3068\u3001web.xml\u306e\u5185\u5bb9\u3092\u542b\u3080\u30d5\u30a1\u30a4\u30eb\u304c\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3067\u304d\u307e\u3059\u3002 msg.note.slow.regular.expression=\u6587\u5b57\u5217\u306b aaaaaaaaaaaaaaaaaaaaaaaaaaaaa\u3042 \u3092\u5165\u529b\u3059\u308b\u3068\u3001\u69cb\u6587\u89e3\u6790\u306b\u6570\u5341\u79d2\u304b\u308a\u307e\u3059\u3002
\      \u6587\u5b57\u5217\u306b aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\u3042 \u3092\u5165\u529b\u3059\u308b\u3068...