juice-shop

1
server:
2
  port:
3
    type: number
4
  basePath:
5
    type: string
6
  baseUrl:
7
    type: string
8
application:
9
  domain:
10
    type: string
11
  name:
12
    type: string
13
  logo:
14
    type: string
15
  favicon:
16
    type: string
17
  theme:
18
    type: string
19
  showVersionNumber:
20
    type: boolean
21
  showGitHubLinks:
22
    type: boolean
23
  localBackupEnabled:
24
    type: boolean
25
  numberOfRandomFakeUsers:
26
    type: number
27
  altcoinName:
28
    type: string
29
  privacyContactEmail:
30
    type: string
31
  customMetricsPrefix:
32
    type: string
33
  chatBot:
34
    name:
35
      type: string
36
    greeting:
37
      type: string
38
    trainingData:
39
      type: string
40
    defaultResponse:
41
      type: string
42
    avatar:
43
      type: string
44
  social:
45
    twitterUrl:
46
      type: string
47
    facebookUrl:
48
      type: string
49
    slackUrl:
50
      type: string
51
    redditUrl:
52
      type: string
53
    pressKitUrl:
54
      type: string
55
    nftUrl:
56
      type: string
57
    questionnaireUrl:
58
      type: string
59
  recyclePage:
60
    topProductImage:
61
      type: string
62
    bottomProductImage:
63
      type: string
64
  welcomeBanner:
65
    showOnFirstStart:
66
      type: boolean
67
    title:
68
      type: string
69
    message:
70
      type: string
71
  cookieConsent:
72
    message:
73
      type: string
74
    dismissText:
75
      type: string
76
    linkText:
77
      type: string
78
    linkUrl:
79
      type: string
80
  securityTxt:
81
    contact:
82
      type: string
83
    encryption:
84
      type: string
85
    acknowledgements:
86
      type: string
87
    hiring:
88
      type: string
89
    csaf:
90
      type: string
91
  promotion:
92
    video:
93
      type: string
94
    subtitles:
95
      type: string
96
  easterEggPlanet:
97
    name:
98
      type: string
99
    overlayMap:
100
      type: string
101
  googleOauth:
102
    clientId:
103
      type: string
104
    authorizedRedirects:
105
      - uri:
106
          type: string
107
        proxy:
108
          type: string
109
challenges:
110
  showSolvedNotifications:
111
    type: boolean
112
  showHints:
113
    type: boolean
114
  showMitigations:
115
    type: boolean
116
  codingChallengesEnabled:
117
    type: string
118
  restrictToTutorialsFirst:
119
    type: boolean
120
  overwriteUrlForProductTamperingChallenge:
121
    type: string
122
  xssBonusPayload:
123
    type: string
124
  safetyMode:
125
    type: string
126
    enum: ['enabled', 'disabled','auto']
127
  showFeedbackButtons:
128
    type: boolean
129
  csafHashValue:
130
    type: string
131
hackingInstructor:
132
  isEnabled:
133
    type: boolean
134
  avatarImage:
135
    type: string
136
  hintPlaybackSpeed:
137
    type: string
138
products:
139
  - name:
140
      type: string
141
    price:
142
      type: number
143
    deluxePrice:
144
      type: number
145
    description:
146
      type: string
147
    image:
148
      type: string
149
    quantity:
150
      type: number
151
    limitPerUser:
152
      type: number
153
    deletedDate:
154
      type: string
155
    urlForProductTamperingChallenge:
156
      type: string
157
    useForChristmasSpecialChallenge:
158
      type: boolean
159
    keywordsForPastebinDataLeakChallenge:
160
      - type: string
161
    fileForRetrieveBlueprintChallenge:
162
      type: string
163
    exifForBlueprintChallenge:
164
      - type: string
165
    reviews:
166
      - text:
167
          type: string
168
        author:
169
          type: string
170
memories:
171
  - image:
172
      type: string
173
    caption:
174
      type: string
175
    user:
176
      type: string
177
    geoStalkingMetaSecurityQuestion:
178
      type: number
179
    geoStalkingMetaSecurityAnswer:
180
      type: string
181
    geoStalkingVisualSecurityQuestion:
182
      type: number
183
    geoStalkingVisualSecurityAnswer:
184
      type: string
185
ctf:
186
  showFlagsInNotifications:
187
    type: boolean
188
  showCountryDetailsInNotifications:
189
    type: string
190
  countryMapping:
191
    scoreBoardChallenge:
192
      name:
193
        type: string
194
      code:
195
        type: string
196
    errorHandlingChallenge:
197
      name:
198
        type: string
199
      code:
200
        type: string
201
    forgedReviewChallenge:
202
      name:
203
        type: string
204
      code:
205
        type: string
206
    loginAdminChallenge:
207
      name:
208
        type: string
209
      code:
210
        type: string
211
    loginJimChallenge:
212
      name:
213
        type: string
214
      code:
215
        type: string
216
    loginBenderChallenge:
217
      name:
218
        type: string
219
      code:
220
        type: string
221
    localXssChallenge:
222
      name:
223
        type: string
224
      code:
225
        type: string
226
    reflectedXssChallenge:
227
      name:
228
        type: string
229
      code:
230
        type: string
231
    persistedXssUserChallenge:
232
      name:
233
        type: string
234
      code:
235
        type: string
236
    persistedXssFeedbackChallenge:
237
      name:
238
        type: string
239
      code:
240
        type: string
241
    restfulXssChallenge:
242
      name:
243
        type: string
244
      code:
245
        type: string
246
    unionSqlInjectionChallenge:
247
      name:
248
        type: string
249
      code:
250
        type: string
251
    weakPasswordChallenge:
252
      name:
253
        type: string
254
      code:
255
        type: string
256
    feedbackChallenge:
257
      name:
258
        type: string
259
      code:
260
        type: string
261
    forgedFeedbackChallenge:
262
      name:
263
        type: string
264
      code:
265
        type: string
266
    redirectCryptoCurrencyChallenge:
267
      name:
268
        type: string
269
      code:
270
        type: string
271
    redirectChallenge:
272
      name:
273
        type: string
274
      code:
275
        type: string
276
    basketAccessChallenge:
277
      name:
278
        type: string
279
      code:
280
        type: string
281
    negativeOrderChallenge:
282
      name:
283
        type: string
284
      code:
285
        type: string
286
    directoryListingChallenge:
287
      name:
288
        type: string
289
      code:
290
        type: string
291
    forgottenDevBackupChallenge:
292
      name:
293
        type: string
294
      code:
295
        type: string
296
    forgottenBackupChallenge:
297
      name:
298
        type: string
299
      code:
300
        type: string
301
    adminSectionChallenge:
302
      name:
303
        type: string
304
      code:
305
        type: string
306
    changePasswordBenderChallenge:
307
      name:
308
        type: string
309
      code:
310
        type: string
311
    changeProductChallenge:
312
      name:
313
        type: string
314
      code:
315
        type: string
316
    knownVulnerableComponentChallenge:
317
      name:
318
        type: string
319
      code:
320
        type: string
321
    weirdCryptoChallenge:
322
      name:
323
        type: string
324
      code:
325
        type: string
326
    easterEggLevelOneChallenge:
327
      name:
328
        type: string
329
      code:
330
        type: string
331
    easterEggLevelTwoChallenge:
332
      name:
333
        type: string
334
      code:
335
        type: string
336
    forgedCouponChallenge:
337
      name:
338
        type: string
339
      code:
340
        type: string
341
    christmasSpecialChallenge:
342
      name:
343
        type: string
344
      code:
345
        type: string
346
    uploadSizeChallenge:
347
      name:
348
        type: string
349
      code:
350
        type: string
351
    uploadTypeChallenge:
352
      name:
353
        type: string
354
      code:
355
        type: string
356
    fileWriteChallenge:
357
      name:
358
        type: string
359
      code:
360
        type: string
361
    extraLanguageChallenge:
362
      name:
363
        type: string
364
      code:
365
        type: string
366
    captchaBypassChallenge:
367
      name:
368
        type: string
369
      code:
370
        type: string
371
    zeroStarsChallenge:
372
      name:
373
        type: string
374
      code:
375
        type: string
376
    continueCodeChallenge:
377
      name:
378
        type: string
379
      code:
380
        type: string
381
    oauthUserPasswordChallenge:
382
      name:
383
        type: string
384
      code:
385
        type: string
386
    loginSupportChallenge:
387
      name:
388
        type: string
389
      code:
390
        type: string
391
    loginRapperChallenge:
392
      name:
393
        type: string
394
      code:
395
        type: string
396
    premiumPaywallChallenge:
397
      name:
398
        type: string
399
      code:
400
        type: string
401
    resetPasswordJimChallenge:
402
      name:
403
        type: string
404
      code:
405
        type: string
406
    resetPasswordBenderChallenge:
407
      name:
408
        type: string
409
      code:
410
        type: string
411
    resetPasswordMortyChallenge:
412
      name:
413
        type: string
414
      code:
415
        type: string
416
    resetPasswordUvoginChallenge:
417
      name:
418
        type: string
419
      code:
420
        type: string
421
    resetPasswordBjoernChallenge:
422
      name:
423
        type: string
424
      code:
425
        type: string
426
    noSqlCommandChallenge:
427
      name:
428
        type: string
429
      code:
430
        type: string
431
    noSqlReviewsChallenge:
432
      name:
433
        type: string
434
      code:
435
        type: string
436
    noSqlOrdersChallenge:
437
      name:
438
        type: string
439
      code:
440
        type: string
441
    retrieveBlueprintChallenge:
442
      name:
443
        type: string
444
      code:
445
        type: string
446
    typosquattingNpmChallenge:
447
      name:
448
        type: string
449
      code:
450
        type: string
451
    typosquattingAngularChallenge:
452
      name:
453
        type: string
454
      code:
455
        type: string
456
    jwtUnsignedChallenge:
457
      name:
458
        type: string
459
      code:
460
        type: string
461
    jwtForgedChallenge:
462
      name:
463
        type: string
464
      code:
465
        type: string
466
    misplacedSignatureFileChallenge:
467
      name:
468
        type: string
469
      code:
470
        type: string
471
    deprecatedInterfaceChallenge:
472
      name:
473
        type: string
474
      code:
475
        type: string
476
    xxeFileDisclosureChallenge:
477
      name:
478
        type: string
479
      code:
480
        type: string
481
    xxeDosChallenge:
482
      name:
483
        type: string
484
      code:
485
        type: string
486
    rceChallenge:
487
      name:
488
        type: string
489
      code:
490
        type: string
491
    rceOccupyChallenge:
492
      name:
493
        type: string
494
      code:
495
        type: string
496
    tokenSaleChallenge:
497
      name:
498
        type: string
499
      code:
500
        type: string
501
    nftUnlockChallenge:
502
      name:
503
        type: string
504
      code:
505
        type: string
506
    nftMintChallenge:
507
      name:
508
        type: string
509
      code:
510
        type: string
511
    web3WalletChallenge:
512
      name:
513
        type: string
514
      code:
515
        type: string
516
    web3SandboxChallenge:
517
      name:
518
        type: string
519
      code:
520
        type: string
521
    securityPolicyChallenge:
522
      name:
523
        type: string
524
      code:
525
        type: string
526
    hiddenImageChallenge:
527
      name:
528
        type: string
529
      code:
530
        type: string
531
    supplyChainAttackChallenge:
532
      name:
533
        type: string
534
      code:
535
        type: string
536
    timingAttackChallenge:
537
      name:
538
        type: string
539
      code:
540
        type: string
541
    basketManipulateChallenge:
542
      name:
543
        type: string
544
      code:
545
        type: string
546
    emailLeakChallenge:
547
      name:
548
        type: string
549
      code:
550
        type: string
551
    registerAdminChallenge:
552
      name:
553
        type: string
554
      code:
555
        type: string
556
    httpHeaderXssChallenge:
557
      name:
558
        type: string
559
      code:
560
        type: string
561
    sstiChallenge:
562
      name:
563
        type: string
564
      code:
565
        type: string
566
    ssrfChallenge:
567
      name:
568
        type: string
569
      code:
570
        type: string
571
    loginAmyChallenge:
572
      name:
573
        type: string
574
      code:
575
        type: string
576
    usernameXssChallenge:
577
      name:
578
        type: string
579
      code:
580
        type: string
581
    resetPasswordBjoernOwaspChallenge:
582
      name:
583
        type: string
584
      code:
585
        type: string
586
    accessLogDisclosureChallenge:
587
      name:
588
        type: string
589
      code:
590
        type: string
591
    dlpPasswordSprayingChallenge:
592
      name:
593
        type: string
594
      code:
595
        type: string
596
    dlpPastebinDataLeakChallenge:
597
      name:
598
        type: string
599
      code:
600
        type: string
601
    videoXssChallenge:
602
      name:
603
        type: string
604
      code:
605
        type: string
606
    twoFactorAuthUnsafeSecretStorageChallenge:
607
      name:
608
        type: string
609
      code:
610
        type: string
611
    manipulateClockChallenge:
612
      name:
613
        type: string
614
      code:
615
        type: string
616
    privacyPolicyChallenge:
617
      name:
618
        type: string
619
      code:
620
        type: string
621
    privacyPolicyProofChallenge:
622
      name:
623
        type: string
624
      code:
625
        type: string
626
    passwordRepeatChallenge:
627
      name:
628
        type: string
629
      code:
630
        type: string
631
    dataExportChallenge:
632
      name:
633
        type: string
634
      code:
635
        type: string
636
    ghostLoginChallenge:
637
      name:
638
        type: string
639
      code:
640
        type: string
641
    dbSchemaChallenge:
642
      name:
643
        type: string
644
      code:
645
        type: string
646
    ephemeralAccountantChallenge:
647
      name:
648
        type: string
649
      code:
650
        type: string
651
    missingEncodingChallenge:
652
      name:
653
        type: string
654
      code:
655
        type: string
656
    svgInjectionChallenge:
657
      name:
658
        type: string
659
      code:
660
        type: string
661
    exposedMetricsChallenge:
662
      name:
663
        type: string
664
      code:
665
        type: string
666
    freeDeluxeChallenge:
667
      name:
668
        type: string
669
      code:
670
        type: string
671
    csrfChallenge:
672
      name:
673
        type: string
674
      code:
675
        type: string
676
    xssBonusChallenge:
677
      name:
678
        type: string
679
      code:
680
        type: string
681
    geoStalkingMetaChallenge:
682
      name:
683
        type: string
684
      code:
685
        type: string
686
    geoStalkingVisualChallenge:
687
      name:
688
        type: string
689
      code:
690
        type: string
691
    killChatbotChallenge:
692
      name:
693
        type: string
694
      code:
695
        type: string
696
    nullByteChallenge:
697
      name:
698
        type: string
699
      code:
700
        type: string
701
    bullyChatbotChallenge:
702
      name:
703
        type: string
704
      code:
705
        type: string
706
    lfrChallenge:
707
      name:
708
        type: string
709
      code:
710
        type: string
711
    closeNotificationsChallenge:
712
      name:
713
        type: string
714
      code:
715
        type: string
716
    emptyUserRegistration:
717
      name:
718
        type: string
719
      code:
720
        type: string
721
    csafChallenge:
722
      name:
723
        type: string
724
      code:
725
        type: string
726