diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/DOMInjection.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/DOMInjection.java index 2de1c05e0..0e1eef35d 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/DOMInjection.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/DOMInjection.java @@ -130,7 +130,7 @@ public class DOMInjection extends LessonAdapter { List hints = new ArrayList(); hints.add( "This page is using XMLHTTP to comunicate with the server." ); hints.add( "Try to find a way to inject the DOM to enable the Activate button." ); - hints.add( "Intercept the reply and add document.forms[0].SUBMIT.disabled = false;" ); + hints.add( "Intercept the reply and replace the body withx document.forms[0].SUBMIT.disabled = false;" ); return hints; }