XSS Lesson Modifications (#367)

* initial cut on XSS, need to add some tests still

* initial unit tests for assignment endpoints

* updating header comment license thingy

* comment, clean up

* Stubs for security unit test

* Additional Unit Testing

* isEncoded and isNotEncoded Unit Tests added

* http-proxies updates

* update for XXE solutions

* Work-around to handle special chars in action ... currently to be able to match {userId} in hint creation/assignment for IDOR

* IDOR hints updated

* mitigation content update

* mitigation content update ... 2

* Lesson Overview updates

* including restart lesson fix for lesson overview

webgoat-lessons/sol.txt

@@ -3,6 +3,9 @@ Basic
 Smith  - to show it returns smith's records
 Smith' or '1'='1    - to show exploit; 1=1 can be any true clause
 
+**Bender Login
+bender@juice-sh.op' --
+
 [2:19 PM]  
 101
 101 or 1=1