diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/BasicAuthentication.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/BasicAuthentication.java index 0963c1df1..700a68910 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/BasicAuthentication.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/BasicAuthentication.java @@ -100,7 +100,7 @@ public class BasicAuthentication extends SequentialLessonAdapter // // FIXME: This won;t work for CBT, we need to use the UserTracker //Authorization: Basic Z3Vlc3Q6Z3Vlc3Q= - if (headerName.equals(AUTHORIZATION) + if (headerName.equalsIgnoreCase(AUTHORIZATION) && (headerValue.equals("guest:guest") || headerValue .equals("webgoat:webgoat"))) {