dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #391 from misfir3/develop

Browse Source 
xss updates
This commit is contained in:
misfir3
2017-10-13 09:56:22 -06:00
committed by GitHub
parent 4e7034f6c1 f9a43d0961
commit 09742323b3
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/cross-site-scripting/src/main/resources/html/CrossSiteScripting.html
View File

@@ -276,6 +276,8 @@
</div>
<!-- end comments -->
<div class="adoc-content" th:replace="doc:CrossSiteScripting_content7c.adoc"></div>
<div class="attack-container">
<!-- this will be where they can store the additional comment -->
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>

3
webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_content7c.adoc Normal file
View File

@@ -0,0 +1,3 @@
Watching in your browser's developer tools or your proxy, the output should include a value starting with 'phoneHome Response is ...."
Put that value in below to complete this exercise. Note that, each subsequent call to the _phoneHome_ method will change that value.
You may need to ensure you have the most recent one.