From 3579be251968a338d4a35c040c7394260ae87776 Mon Sep 17 00:00:00 2001 From: esheri3 Date: Thu, 25 Jan 2007 19:34:46 +0000 Subject: [PATCH] Minor grammar fixes. git-svn-id: http://webgoat.googlecode.com/svn/trunk@87 4033779f-a91e-0410-96ef-6bf7bf53c507 --- .../main/project/WebContent/lesson_plans/WeakSessionID.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ webgoat/main/project/WebContent/lesson_plans/WeakSessionID.html b/ webgoat/main/project/WebContent/lesson_plans/WeakSessionID.html index 2ea769f51..45157e0b5 100644 --- a/ webgoat/main/project/WebContent/lesson_plans/WeakSessionID.html +++ b/ webgoat/main/project/WebContent/lesson_plans/WeakSessionID.html @@ -3,7 +3,7 @@

Concept / Topic To Teach:

-Application developers who develop their own session ID frequently forget to incorporate the complexity and randomness necessary for security. If the user specific session id is not complex and random, then the application is highly susceptible to session-based brute force attacks. +Application developers who develop their own session IDs frequently forget to incorporate the complexity and randomness necessary for security. If the user specific session ID is not complex and random, then the application is highly susceptible to session-based brute force attacks.

General Goal(s):

Try to access an authenticated session belonging to someone else. \ No newline at end of file