From d8341c86a154a9f4ac4f69d4c2eb47f3f8212176 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=80ngel=20Oll=C3=A9=20Bl=C3=A1zquez?= Date: Sun, 27 Aug 2023 01:44:28 +0200 Subject: [PATCH] bug: fix hint that was breaking the template, causing hints from different assignments to mix (#1424) --- .../resources/lessons/missingac/i18n/WebGoatLabels.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/resources/lessons/missingac/i18n/WebGoatLabels.properties b/src/main/resources/lessons/missingac/i18n/WebGoatLabels.properties index 05fcb449d..82ed8289b 100644 --- a/src/main/resources/lessons/missingac/i18n/WebGoatLabels.properties +++ b/src/main/resources/lessons/missingac/i18n/WebGoatLabels.properties @@ -15,7 +15,7 @@ access-control.hash.hint1=This assignment involves one simple change in a GET re access-control.hash.hint2=If you haven't found the hidden menus from the earlier exercise, go do that first. access-control.hash.hint3=When you look at the users page, there is a hint that more info is viewable by a given role. access-control.hash.hint4=Have you tried tampering the GET request? Different content-types? -access-control.hash.hint5=Modify the GET request to `/access-control/users` to include 'Content-Type: application/json' +access-control.hash.hint5=Modify the GET request to '/access-control/users' to include 'Content-Type': 'application/json' access-control.hash.hint6=Now for the harder way ... it builds on the easier way access-control.hash.hint7=If the request to view users, were a 'service' or 'RESTful' endpoint, what would be different about it?