From 31548b9c571cf2fbd7e703f4abf92616ee709b4a Mon Sep 17 00:00:00 2001
From: Jason White <jason.white@owasp.org>
Date: Wed, 24 May 2017 17:12:28 -0400
Subject: [PATCH] Additional Unit Testing

---
 .../main/java/org/owasp/webgoat/plugin/StoredXssComments.java    | 1 +
 1 file changed, 1 insertion(+)

diff --git a/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/plugin/StoredXssComments.java b/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/plugin/StoredXssComments.java
index ca40ca52a..9ff65eb5e 100644
--- a/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/plugin/StoredXssComments.java
+++ b/webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/plugin/StoredXssComments.java
@@ -66,6 +66,7 @@ public class StoredXssComments extends AssignmentEndpoint {
     private static final String phoneHomeString = "<script>webgoat.customjs.phoneHome()</script>";
 
     static {
+        comments.add(new Comment("secUriTy", DateTime.now().toString(fmt), "<script>console.warn('unit test me')</script>Comment for Unit Testing"));
         comments.add(new Comment("webgoat", DateTime.now().toString(fmt), "This comment is safe"));
         comments.add(new Comment("guest", DateTime.now().toString(fmt), "This one is safe too."));
         comments.add(new Comment("guest", DateTime.now().toString(fmt), "Can you post a comment,  calling webgoat.customjs.phoneHome() ?"));