The goal of this assignment is to learn about web security by exploiting and defending an e-commerce website called Bruin Market. A version of Bruin Market is deployed at an address included below. However, you can deploy your own version of Bruin Market locally using the commands below.
Assignment Specification: Assignment 1: Web Security
Deployed Bruin Market: https://bruin-market.ece117.com/
After running the following commands, you can access Bruin Market at http://localhost/. You can stop the server by pressing Ctrl+C
in the terminal window where you ran the command.
cd bruin-market/
docker build -t bruin-market .
docker run --name bruin-market-app -p 80:80 bruin-market
- 1/19/2023: Updated
routes/session.py
,routes/user.py
, andmodels/session.py
to handle id collisions and an issue with defaultSameSite=Lax
cookies. Special thanks to Jason An for reporting the issue withSameSite=Lax
cookies.