[ismisepaul]

Fixes #654.

What

The XXE lesson and XXE challenge 1 ask players to read a file from the server (briefcase.pulp / json.xml, from fileSystemKeys.properties). Only two paths created those files: setup with "unsafe levels" ticked, and "Open all modules" with unsafe levels enabled. Opening the levels any other way left them unsolvable, because the file wasn't there. That includes Open and Close Modules, Open or Close by Category, and a container recreated after setup.

DatabaseLifecycleListener now creates both files when the application starts. This is done in its own try/catch, so a failure is logged and doesn't affect the database start-up. The existing call sites are unchanged. The levels themselves aren't touched.

Tests

DatabaseLifecycleListenerTest.testContextInitializedCreatesXxeSolutionFiles deletes both files, runs contextInitialized, and checks that each file exists with the solution from fileSystemKeys.properties. It fails on dev (briefcase.pulp was not created) and passes with the fix. An @AfterEach removes the files, because every test in the class that calls contextInitialized now writes them into the working directory.

Every step of test.yml passed locally (lint, build, PGP check, compose build, Tomcat config check, unit tests, integration tests).

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

The focused change reuses existing helpers, isolates startup error handling, and includes regression coverage with no unresolved findings.

No open issues 🎉

What changed in this PR

Fixes #654 by creating both XXE solution files at application startup, so the levels remain solvable regardless of how they are opened or whether the container is recreated.

Changes:

• Reuses existing file-creation helpers in the lifecycle listener, with separate error handling from database initialization.
• Adds regression coverage for both files’ existence and contents, plus cleanup after each test.

File	Description
src/​test/​java/​listeners/​DatabaseLifecycleListenerTest.java	Verifies both solution files are created correctly and cleans them up after tests.
src/​main/​java/​listeners/​DatabaseLifecycleListener.java	Creates both XXE solution files during application startup.

_{Review effort: Balanced}