From 1520c7571fbf3fdd78876c40640238c70c27e064 Mon Sep 17 00:00:00 2001 From: Josh Cummings Date: Fri, 5 Oct 2018 14:01:52 -0600 Subject: [PATCH] HTML Tampering Mitigation Description Typo --- .../main/resources/lessonPlans/en/HtmlTampering_Mitigation.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webgoat-lessons/html-tampering/src/main/resources/lessonPlans/en/HtmlTampering_Mitigation.adoc b/webgoat-lessons/html-tampering/src/main/resources/lessonPlans/en/HtmlTampering_Mitigation.adoc index 22eb72fa2..a7f238924 100755 --- a/webgoat-lessons/html-tampering/src/main/resources/lessonPlans/en/HtmlTampering_Mitigation.adoc +++ b/webgoat-lessons/html-tampering/src/main/resources/lessonPlans/en/HtmlTampering_Mitigation.adoc @@ -1,6 +1,6 @@ === Mitigation -In this simple example you noticed that the price is calculated server side and send to the server. The server +In this simple example you noticed that the price is calculated client-side and sent to the server. The server accepted the input as a given and did not calculate the price again. One of the mitigations in this case is to look up the price of the television in your database and calculate the total price again.