dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Changed the lesson plans of all the XSS lessons.

Browse Source
This commit is contained in:
Benedikt - Desktop 2018-11-18 15:32:09 +01:00 committed by Nanne Baars
parent fffbb3c804
commit 600c6203ef
3 changed files with 10 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScriptingMitigation_plan.adoc
View File

@ -1,15 +1,13 @@
== Concept
This lesson describes what is Cross-Site Scripting (XSS) and how it can be manipulated to perform tasks that were not the original intent of the developer.
After learning what Cross-Site Scripting (XSS) is and how it works,
you will know learn how you can defend against it.
== Goals
* The user should have a basic understand how XSS works.
* The user will understand the best practices for defending against XSS injection attacks
* The user will demonstrate knowledge on:
** Reflected XSS Injection
** Stored XSS Injection
** Dom-Based XSS Injection
** XSS Mitigation

13
webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScriptingStored_plan.adoc
View File

@ -1,15 +1,8 @@
== Concept
This lesson describes what is Cross-Site Scripting (XSS) and how it can be manipulated to perform tasks that were not the original intent of the developer.
After taking a look at Reflected XSS in the previous lesson. We're now gonna take a closer look at another form of Cross Site Scripting Attack: Stored CSS.
== Goals
* The user should have a basic understand how XSS works.
* The user will understand the best practices for defending against XSS injection attacks
* The user will learn what Stored XSS is
* The user will demonstrate knowledge on:
** Reflected XSS Injection
** Stored XSS Injection
** Dom-Based XSS Injection
** Stored XSS Injection

9
webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_plan.adoc
View File

@ -1,15 +1,14 @@
== Concept
This lesson describes what is Cross-Site Scripting (XSS) and how it can be manipulated to perform tasks that were not the original intent of the developer.
This lesson describes what Cross-Site Scripting (XSS) is and how it can be used to perform tasks that were not the original intent of the developer.
== Goals
* The user should have a basic understand how XSS works.
* The user will understand the best practices for defending against XSS injection attacks
* The user should have a basic understanding of what XSS is and how it works
* The user will learn what Reflected XSS is
* The user will demonstrate knowledge on:
** Reflected XSS Injection
** Stored XSS Injection
** Dom-Based XSS Injection
** DOM-based XSS Injection