%@ page contentType="text/html; charset=ISO-8859-1" language="java" import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.CrossSiteScripting.CrossSiteScripting" errorPage="" %> <% WebSession webSession = ((WebSession)session.getAttribute("websession")); CrossSiteScripting currentLesson = (CrossSiteScripting) webSession.getCurrentLesson(); %>