Anarking / webgoat

Automatically exported from code.google.com/p/webgoat
0 stars 0 forks source link

"Discover Clues in HTML Lesson" cannot be solved due to lacking solution code in page. #72

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. Launch webgoat
2. Visit the "Discover clues in HTML" lesson.
3. View source for admin/adminpw as said in solution.

What is the expected output? What do you see instead?

          There should be a listing of admin/adminpw on the html page.

What version of the product are you using? On what operating system?

           Version 6.0.1 Build 14

Please provide any additional information below.

Original issue reported on code.google.com by cont...@rmusser.net on 19 Mar 2015 at 10:36

GoogleCodeExporter commented 8 years ago
WEB-201 in our Jira project has been filed:  
https://webgoat.atlassian.net/browse/WEB-201

Thank you.

Original comment by mayhe...@gmail.com on 20 Mar 2015 at 1:09

GoogleCodeExporter commented 8 years ago

Original comment by mayhe...@gmail.com on 20 Mar 2015 at 1:15

GoogleCodeExporter commented 8 years ago
'View Source' will only view original source of page and that's just not 
reliable anymore given what we do with web apps.

Try using a DOM inspector (e.g. Firebug, Chrome debugger/developer tools) or a 
proxy that watches the call to get lesson content.  I commented in the ticket. 
We'll have to look at updating the content/hints as well.

Original comment by jason.wh...@owasp.org on 24 Mar 2015 at 12:55