From fc05a68ef7725cae25e57d552395448ab72a0173 Mon Sep 17 00:00:00 2001 From: Jason White Date: Wed, 19 Jul 2017 16:00:10 -0400 Subject: [PATCH] update to IDOR hints --- .../idor/src/main/resources/i18n/WebGoatLabels.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webgoat-lessons/idor/src/main/resources/i18n/WebGoatLabels.properties b/webgoat-lessons/idor/src/main/resources/i18n/WebGoatLabels.properties index 95cabc767..7f2c10b81 100644 --- a/webgoat-lessons/idor/src/main/resources/i18n/WebGoatLabels.properties +++ b/webgoat-lessons/idor/src/main/resources/i18n/WebGoatLabels.properties @@ -18,7 +18,7 @@ idor.hints.otherProfile5=To edit the other user's profile, you will use the same idor.hints.otherProfile6=To edit, You will need to change the method, what is the RESTful method used for 'update' or 'edit'? idor.hints.otherProfile7=You will also need the body of the request (will look something like the profile) idor.hints.otherProfile8=The request should go to ... /WebGoat/IDOR/profile/{Buffalo Bills Id} -idor.hints.otherProfile9={\"role\" : 1,\"color\" : \"red\",\"size\" : \"small\",\"name\" : \"Tom Cat\",\"userId\" : \"2342388\"} +idor.hints.otherProfile9=Your payload should look something like ... {\"role\" : 1,\"color\" : \"red\",\"size\" : \"small\",\"name\" : \"Tom Cat\",\"userId\" : \"2342388\"} idor.diff.attributes.missing=You did not list two attributes, comma delimited idor.diff.success=Correct, the two attributes not displayed are userId & role. Keep those in mind