use of script console in stead of browser address bar

2020-04-16 13:53:45 +02:00 · 2020-04-16 13:53:45 +02:00 · 25e66ae412
commit 25e66ae412
parent 089952e9ad
1 changed files with 3 additions and 3 deletions
--- a/webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_content1.adoc
+++ b/webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_content1.adoc
@ -16,11 +16,11 @@ And if not properly protected, sensitive data (such as your authentication cooki


 ==== Quick examples:
-* From the browser address bar (chrome, Firefox)
+* From the JavaScript console in the developer tools of the browser (chrome, Firefox)
 +
 ----
-javascript:alert("XSS Test");
-javascript:alert(document.cookie);
+alert("XSS Test");
+alert(document.cookie);
 ----
 * Any data field that is returned to the client is potentially injectable
 +