e1e00bca73
* refactor: rewrite hints Use active voice and fix grammar issues. * fix: use Thymeleaf `th:action` * fix: JWT kid/jku lessons Split the JavaScript into two files they pointed to the same URL The JWTs are now valid, they parse successfully. The paths now include `/kid` and `/jku` to make sure the hints match accordingly in the UI. Otherwise `/delete` would pick up both hints from both assignments as the paths overlap. Closes: #1715 * fix: update to latest pre-commit version * fix: increase timeouts for server to start during integration tests
80 lines
2.5 KiB
HTML
80 lines
2.5 KiB
HTML
<!DOCTYPE html>
|
|
|
|
<html xmlns:th="http://www.thymeleaf.org">
|
|
|
|
<div class="lesson-page-wrapper">
|
|
<div class="adoc-content" th:replace="~{doc:lessons/xss/documentation/CrossSiteScriptingStored_plan.adoc}"></div>
|
|
</div>
|
|
|
|
<div class="lesson-page-wrapper">
|
|
<div class="adoc-content" th:replace="~{doc:lessons/xss/documentation/CrossSiteScripting_content7.adoc}"></div>
|
|
</div>
|
|
|
|
<div class="lesson-page-wrapper">
|
|
|
|
<div class="adoc-content" th:replace="~{doc:lessons/xss/documentation/CrossSiteScripting_content7b.adoc}"></div>
|
|
|
|
<!-- comment area -->
|
|
<link rel="stylesheet" type="text/css" th:href="@{/lesson_css/stored-xss.css}"/>
|
|
<script th:src="@{/lesson_js/stored-xss.js}" language="JavaScript"></script>
|
|
|
|
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
|
|
|
|
<div class="container-fluid">
|
|
<div class="panel post">
|
|
<div class="post-heading">
|
|
<div class="pull-left image">
|
|
<img th:src="@{/images/avatar1.png}"
|
|
class="img-circle avatar" alt="user profile image"/>
|
|
</div>
|
|
<div class="pull-left meta">
|
|
<div class="title h5">
|
|
<a href="#"><b>John Doe</b></a>
|
|
uploaded a photo.
|
|
</div>
|
|
<h6 class="text-muted time">24 days ago</h6>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="post-image">
|
|
<img th:src="@{images/cat.jpg}" class="image" alt="image post"/>
|
|
</div>
|
|
|
|
<div class="post-description">
|
|
|
|
</div>
|
|
<div class="post-footer">
|
|
<div class="input-group">
|
|
<input class="form-control" id="commentInput" placeholder="Add a comment" type="text"/>
|
|
<span class="input-group-addon">
|
|
<i id="postComment" class="fa fa-edit" style="font-size: 20px"></i>
|
|
</span>
|
|
</div>
|
|
<ul class="comments-list">
|
|
<div id="list">
|
|
</div>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<!-- end comments -->
|
|
|
|
<div class="adoc-content" th:replace="~{doc:lessons/xss/documentation/CrossSiteScripting_content7c.adoc}"></div>
|
|
|
|
<div class="attack-container">
|
|
<!-- this will be where they can store the additional comment -->
|
|
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
|
|
|
|
<form class="attack-form" accept-charset="UNKNOWN"
|
|
method="POST" name="DOMFollowUp"
|
|
th:action="@{/CrossSiteScriptingStored/stored-xss-follow-up}">
|
|
<input name="successMessage" value="" type="TEXT" />
|
|
<input name="submitMessage" value="Submit" type="SUBMIT"/>
|
|
</form>
|
|
<div class="attack-feedback"></div>
|
|
<div class="attack-output"></div>
|
|
</div>
|
|
</div>
|
|
|
|
</html>
|