Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
See all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
OWASP
SecurityShepherd
Repository navigation
Code
Issues
143
(143)
Pull requests
22
(22)
Discussions
Actions
Projects
Wiki
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
SecurityShepherd
src
main
webapp
on
dev
User selector
All users
Datepicker
All time
Commit history
Commits on Oct 23, 2026
refactor: JSTL taglib URIs to jakarta.tags.* (PR 7 of jakarta migration #861) (#941)
Show description for 7f26fec
ismisepaul
and
claude
authored
7f26fec
View commit details
Copy full SHA for 7f26fec
View code at this point
Browse repository at this point
build: web.xml on the Jakarta EE 11 (Servlet 6.1) schema (PR 6 of jakarta migration #861) (#940)
Show description for cb548ee
ismisepaul
and
claude
authored
cb548ee
View commit details
Copy full SHA for cb548ee
View code at this point
Browse repository at this point
Commits on Oct 9, 2026
chore: add Generic Russian String (#933)
Show description for cff3958
Rasperskii
and
SeanDuggan
authored
cff3958
View commit details
Copy full SHA for cff3958
View code at this point
Browse repository at this point
Commits on May 30, 2026
feat: add connection pooling to fix db connection exhaustion (#536) (#816)
Show description for c47c52f
3 people
authored
c47c52f
View commit details
Copy full SHA for c47c52f
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
fix: correct 82 spelling errors across codebase
Show description for 8b9a23b
SeanDuggan
committed
8b9a23b
View commit details
Copy full SHA for 8b9a23b
View code at this point
Browse repository at this point
Commits on Nov 28, 2022
avoid issues with empty scoreboard (#724) (#725)
rudosch
authored
4651b00
View commit details
Copy full SHA for 4651b00
View code at this point
Browse repository at this point
Commits on Nov 14, 2022
Dev#711 (#713)
Show description for f0d3284
rudosch
authored
f0d3284
View commit details
Copy full SHA for f0d3284
View code at this point
Browse repository at this point
Commits on Jul 26, 2022
Adding new images for the banner and removing old images closes #686
ismisepaul
authored and
markdenihan
committed
c967120
View commit details
Copy full SHA for c967120
View code at this point
Browse repository at this point
Commits on May 26, 2022
Fixing issue where you cannot see the result key for XXE Challenge 1 by splitting out the levels. Adding a small check to not reveal key from both levels. fixes issue #652
ismisepaul
committed
b07a67a
View commit details
Copy full SHA for b07a67a
View code at this point
Browse repository at this point
Commits on May 16, 2022
Fixing Some Levels, Upgrading Libraries, Enhancement to Tomcat and verifying fixes (#638)
Show description for 14ba710
3 people
authored
14ba710
View commit details
Copy full SHA for 14ba710
View code at this point
Browse repository at this point
Commits on Mar 16, 2022
Setting Google Styleguide and adding Contributing.md (#572) (#13)
Show description for cf57dbf
2 people
authored and
markdenihan
committed
cf57dbf
View commit details
Copy full SHA for cf57dbf
View code at this point
Browse repository at this point
Commits on Dec 21, 2021
Updating from log4j 1.2.7 to log4j 2.16 resolving issue #588
ismisepaul
authored and
markdenihan
committed
9702559
View commit details
Copy full SHA for 9702559
View code at this point
Browse repository at this point
Updating from log4j 1.2.7 to log4j 2.16
ismisepaul
authored and
markdenihan
committed
4dd044f
View commit details
Copy full SHA for 4dd044f
View code at this point
Browse repository at this point
Commits on Feb 1, 2021
Updated challenge text's CSRF-token parameter name
Show description for fd5121f
argillander
authored and
markdenihan
committed
fd5121f
View commit details
Copy full SHA for fd5121f
View code at this point
Browse repository at this point
Commits on Sep 19, 2020
Merge branch 'dev' into dev#547-xxe
pmccann
committed
53f50b7
View commit details
Copy full SHA for 53f50b7
View code at this point
Browse repository at this point
Commits on Sep 14, 2020
Make sure SSO logins can handle duplicate usernames (#531)
Show description for 147d0e3
etnoy
and
Theadri1900
authored
147d0e3
View commit details
Copy full SHA for 147d0e3
View code at this point
Browse repository at this point
Commits on Mar 2, 2020
Working using previously created XXE challenge
ismisepaul
committed
7fba4ae
View commit details
Copy full SHA for 7fba4ae
View code at this point
Browse repository at this point
Commits on Feb 24, 2020
Making a start on #547 xxe challenge 1
ismisepaul
committed
ce33f24
View commit details
Copy full SHA for ce33f24
View code at this point
Browse repository at this point
Commits on Nov 14, 2019
Salted hashed passwords using argon2 (#515)
Show description for c57fed8
etnoy
authored and
markdenihan
committed
c57fed8
View commit details
Copy full SHA for c57fed8
View code at this point
Browse repository at this point
Commits on Sep 25, 2019
Adding OWASP URLs to lessons and code refactoring. closes #215
ismisepaul
authored and
markdenihan
committed
6bcce67
View commit details
Copy full SHA for 6bcce67
View code at this point
Browse repository at this point
Commits on Sep 4, 2019
XXE Level - Integration Tests - Dev#334 (#497)
Show description for 8f93373
Pól
authored and
markdenihan
committed
8f93373
View commit details
Copy full SHA for 8f93373
View code at this point
Browse repository at this point
Commits on Jul 16, 2019
Cleaning up
ismisepaul
authored and
markdenihan
committed
3a15083
View commit details
Copy full SHA for 3a15083
View code at this point
Browse repository at this point
Fixing whitespace and meaningful tagging for docker
ismisepaul
authored and
markdenihan
committed
c6b972a
View commit details
Copy full SHA for c6b972a
View code at this point
Browse repository at this point
MongoDb setup is now optional
ismisepaul
authored and
markdenihan
committed
f7a93ef
View commit details
Copy full SHA for f7a93ef
View code at this point
Browse repository at this point
Working for Docker and setup page closes #373
ismisepaul
authored and
markdenihan
committed
b808148
View commit details
Copy full SHA for b808148
View code at this point
Browse repository at this point
Commits on Jun 21, 2019
Fixing the hint for SQL Injection Escaping Challenge : the SQL query was
Show description for 4c8631d
Samuel-BF
authored and
markdenihan
committed
4c8631d
View commit details
Copy full SHA for 4c8631d
View code at this point
Browse repository at this point
Update web.xml
abhinav-k
authored and
markdenihan
committed
1c99267
View commit details
Copy full SHA for 1c99267
View code at this point
Browse repository at this point
Commits on Nov 6, 2018
debugging code removed
cwavesoftware
authored and
markdenihan
committed
96e1284
View commit details
Copy full SHA for 96e1284
View code at this point
Browse repository at this point
Where I Stand view improved according to Acceptance Criteria
cwavesoftware
authored and
markdenihan
committed
2bd11ae
View commit details
Copy full SHA for 2bd11ae
View code at this point
Browse repository at this point
dev#322 Adding some style, Where I stand button will only show up if scoreboard has > 20 players
cwavesoftware
authored and
markdenihan
committed
b417f38
View commit details
Copy full SHA for b417f38
View code at this point
Browse repository at this point
dev#322 Added Where I Stand html anchor in scoreboard
cwavesoftware
authored and
markdenihan
committed
6fdb57a
View commit details
Copy full SHA for 6fdb57a
View code at this point
Browse repository at this point
Commits on Oct 26, 2018
Feature/i18n french (#455)
Show description for ddb4411
Samuel-BF
authored and
Pól
committed
ddb4411
View commit details
Copy full SHA for ddb4411
View code at this point
Browse repository at this point
Commits on Oct 23, 2018
Update aboutShepherd.jsp
markdenihan
authored
87abf0d
View commit details
Copy full SHA for 87abf0d
View code at this point
Browse repository at this point
Commits on Oct 11, 2018
Dev#394 (#438)
Show description for 0054eaa
Rob-Conan
authored and
markdenihan
committed
0054eaa
View commit details
Copy full SHA for 0054eaa
View code at this point
Browse repository at this point
#436 Removing old Registration Validation
markdenihan
committed
702905d
View commit details
Copy full SHA for 702905d
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.