dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

PasswordReset_plan.adoc: Spelling fixes

Browse Source
This commit is contained in:
Elie De Brauwer 2020-05-23 15:52:53 +02:00 committed by Nanne Baars
parent 966d7a7aed
commit 2e8d0dd9b5
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_plan.adoc
View File

@ -12,11 +12,11 @@ Teach how to securely implement password reset functionality within your applica
== Introduction == Introduction
Each and every one of us will have used the password reset functionality on websites before. Each website implements Each and every one of us will have used the password reset functionality on websites before. Each website implements
this functionality in a different manner. On some site you have to answer some question on other sites an e-mail this functionality in a different manner. On some sites you have to answer some question on other sites an e-mail
with an activation link will be send to you. In this lesson we will go through some of the most common password with an activation link will be sent to you. In this lesson we will go through some of the most common password
reset functionalities and show where it can go wrong. reset functionalities and show where it can go wrong.
Still there are companies which will send the password in plaintext to a user in an e-mail. For a couple of examples Still there are companies which will send the password in plaintext to a user in an e-mail. For a couple of examples
you can take a look at http://plaintextoffenders.com/ Here you will find website which still send you the plaintext you can take a look at http://plaintextoffenders.com/. Here you will find websites which still send you the plaintext
password in an e-mail. Not only this should make you question the security of the site but this also mean they store password in an e-mail. Not only this should make you question the security of the site but this also means they store
your password in plaintext! your password in plaintext!