SamuraiWTF / samuraiwtf

The main SamuraiWTF collaborative distro repo.
https://owasp.org/www-project-samuraiwtf/#SamuraiWTF_Project
GNU Lesser General Public License v3.0
462 stars 119 forks source link

XXE Challenges Disabled #43

Closed JGillam closed 6 years ago

JGillam commented 6 years ago

There was an issue in JuiceShop where the XXE challenges would cause a core dump while running in a Docker container. This has been logged with JuiceShop already and there is no known solution at this time. However, the problem is specific to Docker deployments. Therefore JuiceShop has addressed it by disabling the XXE challenges when running in a Docker container (this doesn't fix the issue, just prevents the core dumps by disabling functionality).

To re-enable the XXE challenge, JuiceShop needs to be deployed in SamuraiWTF directly (i.e. not in a Docker container).