update to do CSRF-based comment forging

2017-10-12 18:17:48 -06:00
parent d0ec84e9a6
commit b03a32f92c
10 changed files with 452 additions and 25 deletions
--- a/webgoat-lessons/csrf/src/main/resources/lessonPlans/en/CSRF_Get_Flag.adoc
+++ b/webgoat-lessons/csrf/src/main/resources/lessonPlans/en/CSRF_Get_Flag.adoc
@ -1,4 +1,4 @@
 == Basic Get CSRF Exercise

-place holder ...
+Trigger the form below from an external source while logged in. The response will include a 'flag' (a numeric value).