index.jsp: CTF countdown never clears, malformed deletePlayers error HTML, debug alert on success messages
Maintainers usually reply within 1 day
@Sagar07Kr is already working on this.
Since Oct 29, 2026.
Assessment
- Difficulty
- 1/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 84/100
- Issue type
- Bug
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- java, javascript, jquery
- Domain
- frontend
Research direction
All three issues are in src/main/webapp/index.jsp; start by reading makeTimer, the deletePlayers error path, and the .successAlert click handler. Fix the countdown clearing and malformed paragraph markup, and remove the debug alert. Done when the countdown clears at zero, the error message renders as valid markup, and dismissing a success message shows no browser alert.
Written by the indexing model from the issue text.
Description
Discovered during #957. All three are in src/main/webapp/index.jsp and behave the same with jQuery 1.7.1 and 3.7.1.
makeTimer:$("#…Message").html();is the getter, not a setter, so the countdown message is never cleared when it reaches zero.- deletePlayers error path: builds
"<p" + msg + "</p", missing both>, so the error message renders as broken markup. .successAlertclick handler: still has a debugalert("successAlert click"), so dismissing a success message pops a browser alert.
🤖 Generated with Claude Code
- Dominant language
- Java
- Stars
- 1.5k
- Forks
- 530
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 61
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from OWASP/SecurityShepherd
-
ci: integration-tests fail on Ubuntu 26 because /etc/init.d/mysql is removedPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 1/5 Under an hour Newbie friendliness 88/100
OWASP/SecurityShepherd#1114 ·
Maintainers usually reply within 1 day
-
ci: integration-tests fail on Ubuntu 26 because /etc/init.d/mysql is removedPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 1/5 Under an hour Newbie friendliness 88/100
OWASP/SecurityShepherd#1113 ·
Maintainers usually reply within 1 day
-
Setup fails with "No suitable driver found" when Tomcat started without database.propertiesPossibly taken @HusainMain claimed this 7 days ago. OpenBug Platform
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
OWASP/SecurityShepherd#1082 · 1 comment ·
Maintainers usually reply within 1 day
-
DirectObjectBankLogin holds a challenge-pool connection while bankForm() borrows a second onePossibly taken @utafrali claimed this 7 days ago. OpenBug Levels
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
OWASP/SecurityShepherd#1063 · 1 comment ·
Maintainers usually reply within 1 day
-
Bug WebApp
Difficulty 1/5 Under an hour Newbie friendliness 78/100
OWASP/SecurityShepherd#996 ·
Maintainers usually reply within 1 day
All issues in OWASP/SecurityShepherd
Similar issues
-
API `/api/dataverses/{identifier}/dataset/linkingDataverses?alreadyLinking=true` returns at most 1 collectionPossibly taken A pull request linked to this issue is open or already merged. OpenType: Bug
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
Maintainers usually reply within 1 day
-
javaoperatorsdk.client.oauth-token has no effect on the Kubernetes clientPossibly taken @RaphaelFakhri claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
MCP add-on: JSON responses with non-ASCII characters are truncated (wrong Content-Length)Possibly taken @dhanushbs10 claimed this today. Openadd-on bug in:mcp
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
Map.Coordinate does not implement proper equalsPossibly taken A pull request linked to this issue is open or already merged. Openvaadin-map
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
vaadin/flow-components#10586 ·
Maintainers usually reply within 1 day
-
WeReadInstaller writes the launcher database on the main thread at handover (Activity pause timeout)Openbug good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 70/100