investigate potential impact of remote web resources in targets

David Rhoades — Mon, 16 Dec 2019 18:31:22 -0000

Some target web apps, such as Juice Shop, have remote resources (e.g. jQuery).
Will that affect the appearance and/or functionality of targets when using without Internet access?

Here is a sample of HTML from JuiceShop:

 <title>OWASP Juice Shop</title>
  <base href="/">
  <meta name="description" content="Probably the most modern and sophisticated insecure web application">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link id="favicon" rel="icon" type="image/x-icon" href="favicon.ico">
  <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
  <link rel="stylesheet" type="text/css" href="//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.css" />
  <script src="//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js"></script>
  <script src="//cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>

Recent changes to 36: investigate potential impact of remote web resources in targets

investigate potential impact of remote web resources in targets