Fixing wording a smidge.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@372 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
parent
9331ef0d9a
commit
5506f1c279
@ -143,7 +143,7 @@ public class RoleBasedAccessControl extends GoatHillsFinancial
|
|||||||
instructions = "Stage 1: Bypass Presentational Layer Access Control.<br>"
|
instructions = "Stage 1: Bypass Presentational Layer Access Control.<br>"
|
||||||
+ "As regular employee 'Tom', exploit weak access control to use the Delete function from the Staff List page. "
|
+ "As regular employee 'Tom', exploit weak access control to use the Delete function from the Staff List page. "
|
||||||
+ "Verify that Tom's profile can be deleted. "
|
+ "Verify that Tom's profile can be deleted. "
|
||||||
+ "The password for a user is always their first name.";
|
+ "The passwords for users are their given names in lowercase (e.g. the password for Tom Cat is \"tom\").";
|
||||||
}
|
}
|
||||||
else if (STAGE2.equals(stage))
|
else if (STAGE2.equals(stage))
|
||||||
{
|
{
|
||||||
|
Loading…
x
Reference in New Issue
Block a user