xss updates

FlorianLoch · Oct 13, 2017 · f9a43d0 · f9a43d0
1 parent 8d488c6
commit f9a43d0
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/webgoat-lessons/cross-site-scripting/src/main/resources/html/CrossSiteScripting.html b/webgoat-lessons/cross-site-scripting/src/main/resources/html/CrossSiteScripting.html
@@ -276,6 +276,8 @@ <h6 class="text-muted time">24 days ago</h6>
 		</div>
 		<!-- end comments -->
 
+	<div class="adoc-content" th:replace="doc:CrossSiteScripting_content7c.adoc"></div>
+
 	<div class="attack-container">
 		<!-- this will be where they can store the additional comment -->
 		<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>

diff --git a/...e-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_content7c.adoc b/...e-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_content7c.adoc
@@ -0,0 +1,3 @@
+Watching in your browser's developer tools or your proxy, the output should include a value starting with 'phoneHome Response is ...."
+Put that value in below to complete this exercise.  Note that, each subsequent call to the _phoneHome_ method will change that value.
+You may need to ensure you have the most recent one.