cam.morris 85c6843ee4 This change includes two additional CSRF lessons. One for ...

by-passing a prompt (showing why prompts don't work).  The second for
by-passing CSRF tokens when XSS exists. 

It also modifies the existing CSRF lesson so that the lesson
can be extended and used by the two new lessons.


git-svn-id: http://webgoat.googlecode.com/svn/trunk@386 4033779f-a91e-0410-96ef-6bf7bf53c507

2009-10-23 21:23:17 +00:00

webgoat

This change includes two additional CSRF lessons. One for

2009-10-23 21:23:17 +00:00

Description

WebGoat is a deliberately insecure application

285 MiB

Languages

JavaScript 51.3%

Java 32.8%

HTML 11.9%

CSS 3.9%