<%@ page contentType="text/html; charset=ISO-8859-1" language="java" import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.CrossSiteScripting.CrossSiteScripting" errorPage="" %> <% WebSession webSession = ((WebSession)session.getAttribute("websession")); Employee employee = (Employee) session.getAttribute("CrossSiteScripting.Employee"); %>

Welcome Back <%=webSession.getUserNameInLesson()%>

First Name:		Last Name:
Street:		City/State:
Phone:		Start Date:
SSN:		Salary:
Credit Card:		Credit Card Limit:
Comments:		Manager:
Disciplinary Explanation:	<%=employee.getDisciplinaryActionNotes()%>	Disciplinary Action Dates: