From 5f690dab4b46fc0359c5d681ca0bfa234374a224 Mon Sep 17 00:00:00 2001
From: saars-orca <126668434+saars-orca@users.noreply.github.com>
Date: Tue, 3 Dec 2024 13:07:11 +0200
Subject: [PATCH] check if code comments work

---
 fail.java | 39 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 fail.java

diff --git a/fail.java b/fail.java
new file mode 100644
index 0000000000..6ae34384c9
--- /dev/null
+++ b/fail.java
@@ -0,0 +1,39 @@
+package org.owasp.webgoat.lessons.challenges.challenge1;
+
+import static org.springframework.web.bind.annotation.RequestMethod.GET;
+import static org.springframework.web.bind.annotation.RequestMethod.POST;
+
+import java.io.IOException;
+import java.util.Random;
+import org.springframework.core.io.ClassPathResource;
+import org.springframework.http.MediaType;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+public class ImageServlet {
+
+  public static final int PINCODE = new Random().nextInt(10000);
+
+  @RequestMapping(
+      method = {GET, POST},
+      value = "/challenge/logo",
+      produces = MediaType.IMAGE_PNG_VALUE)
+  @ResponseBody
+  public byte[] logo() throws IOException {
+    byte[] in =
+        new ClassPathResource("lessons/challenges/images/webgoat2.png")
+            .getInputStream()
+            .readAllBytes();
+
+    String pincode = String.format("%04d", PINCODE);
+
+    in[81216] = (byte) pincode.charAt(0);
+    in[81217] = (byte) pincode.charAt(1);
+    in[81218] = (byte) pincode.charAt(2);
+    in[81219] = (byte) pincode.charAt(3);
+
+    return in;
+  }
+}