This is a fork of Insecure web app from OWASP.

In order to make usage simpler, I switched it to use Gradle for its build tool and am using the Gretty plugin. This enables us to start the web application by simply typing

gradlew appRun

After running that command, go to http://localhost:8080/asc

Instructions to investigate the (in)security are at a link on that page.