diff --git a/ webgoat/main/project/WebContent/lesson_plans/JSONInjection.html b/ webgoat/main/project/WebContent/lesson_plans/JSONInjection.html index 945dfb47e..4c72bd04f 100644 --- a/ webgoat/main/project/WebContent/lesson_plans/JSONInjection.html +++ b/ webgoat/main/project/WebContent/lesson_plans/JSONInjection.html @@ -17,7 +17,7 @@ However, JSON, like XML is prone to Injection attacks. A malicious attacker can

General Goal(s):

* You are traveling from Boston, MA- Airport code BOS to Seattle, WA - Airport code SEA.
-* Once you enter the three digits code of the airport, an AJAX request will be executed asking for the tickets price.
+* Once you enter the three digit code of the airport, an AJAX request will be executed asking for the ticket price.
* You will notice that there are two flights available, an expensive one with no stops and another cheaper one with 2 stops.
* Your goal is to try to get the one with no stops but for a cheaper price. diff --git a/ webgoat/main/project/WebContent/lesson_plans/NewLesson.html b/ webgoat/main/project/WebContent/lesson_plans/NewLesson.html index fd68344b0..b2d62b68f 100644 --- a/ webgoat/main/project/WebContent/lesson_plans/NewLesson.html +++ b/ webgoat/main/project/WebContent/lesson_plans/NewLesson.html @@ -11,10 +11,10 @@ for a new lesson, follow these few simple instructions to implement it:

* You need to add two files for each new lesson:
  - YourLesson.java to org.owasp.webgoat.lessons
  - YourLesson.html to WebContent/lesson_plans

-* YourLesson class implmenet LessonAdapter and override the following methods:
+* YourLesson class must implement LessonAdapter and override the following methods:
 - createContent: Use the ECS package to develop HTML presented to the user.
 - getCategory: Returns the category for which this lesson belongs (XSS, Injection flaws..etc)
- - getHints: List of hints you would like to pass on to the users to point them to right direction.
+ - getHints: List of hints you would like to pass on to the users to point them in the right direction.
 - getTitle: The title for your new lesson.
 - getCredits: Your name goes here.

diff --git a/ webgoat/main/project/WebContent/lesson_plans/SilentTransactions.html b/ webgoat/main/project/WebContent/lesson_plans/SilentTransactions.html index e7ae9f236..d3377dce8 100644 --- a/ webgoat/main/project/WebContent/lesson_plans/SilentTransactions.html +++ b/ webgoat/main/project/WebContent/lesson_plans/SilentTransactions.html @@ -17,8 +17,8 @@ so an injected attack script may be able to steal money from the client without

General Goal(s):

-* This is a sample internet banking application - money transfers page.
+* This is a sample internet banking application - money transfer page.
* It shows below your balance, the account you are transferring to and amount you will transfer.
* The application uses AJAX to submit the transaction after doing some basic client side validations.
-* Your goal is to try to bypass the user's authorization and silently execute the transaction
+* Your goal is to try to bypass the user's authorization and silently execute the transaction.