%@ page contentType="text/html; charset=ISO-8859-1" language="java" import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.DBCrossSiteScripting.DBCrossSiteScripting" errorPage="" %> <% WebSession webSession = ((WebSession)session.getAttribute("websession")); DBCrossSiteScripting currentLesson = (DBCrossSiteScripting) webSession.getCurrentLesson(); %>