(XSS exercise) http://localhost:1337 not working well(JS, CSS, Images) since nginx user doesn't have permissions + Workaround

[reuvenel]

Hey there ;-)

I played with your machine ;-) and i found some problems in the XSS exercise:

• When my browser tries to go: localhost:1337 i see that all Scripts, Images, and CSS getting 403 from the Server.
  So i investigated it a little bit.

First, you must specify a relevant tag when you're using Base docker images
https://github.com/ScaleSec/vulnado/blob/master/client/Dockerfile#L1
Pls change it to something that works and you're happy with like:
nginx:3.14-alpine.
This is what made you trouble, since every time you're taking the latest version.

Workaround(Temporary fix):

Enter to Container

sudo docker exec -it $(sudo docker ps -aqf "name=^vulnado-client") /bin/sh

and goes to

> cd /usr/share/nginx/html

Run those commands:

chmod -R a+rwx images
chmod -R a+rwx css
chmod -R a+rwx js

Now navigate to http://localhost:1337/login.html and make sure that everything is working fine!
• Check if there errors in the Inspect > Console tab in your browser.

Enjoy!