dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

xss updates

Browse Source
This commit is contained in:
Jason White 2017-10-13 09:52:19 -06:00
parent 8d488c6ac6
commit f9a43d0961
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/cross-site-scripting/src/main/resources/html/CrossSiteScripting.html
View File

@ -276,6 +276,8 @@
</div>
<!-- end comments -->
<div class="adoc-content" th:replace="doc:CrossSiteScripting_content7c.adoc"></div>
<div class="attack-container">
<!-- this will be where they can store the additional comment -->
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>

3
webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_content7c.adoc Normal file
View File

@ -0,0 +1,3 @@
Watching in your browser's developer tools or your proxy, the output should include a value starting with 'phoneHome Response is ...."
Put that value in below to complete this exercise. Note that, each subsequent call to the _phoneHome_ method will change that value.
You may need to ensure you have the most recent one.