Skip to content
  • There are no suggestions because the search field is empty.

Add File Functionality Is Broken (Command Injection Lesson)

Issue:

The normal expected functionality with the create a file form in the sandbox app is broken.

Test 1

Login with username=alice and password=monkey1. What happens if you create a new file? Does it work in the same way that it did before you changed the code? You can reset the sandbox to find out. 

Check ✅

Is the file being created in the correct directory? /tmp is not the root directory.

Test 2:

Login with username=alice and password=monkey1. What happens if you create a second new file? Does it work in the same way that it did before you changed the code? You can reset the sandbox to find out.

Test 3:

What if you login with username=bob and password=password. What happens if you create a new file? Does it work in the same way that it did before you changed the code? You can reset the sandbox to find out.