search

pzh0921 / webgoat

Automatically exported from code.google.com/p/webgoat
0 stars 0 forks source link

Dangerous eval - alert(document.cookie) prevented by browser #49

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
In the dangerous eval lesson for WebGoat 5.4, the instructions say to alert 
document.cookie to solve the lesson.  Firefox and IE prevent the cookie from 
being displayed but do not prevent the solution script from putting up a 
dialog.  The lesson is marked completed, but not because of the recommended 
solution.

Either the solution text needs to be changed or the solution should allow the 
alerting of the cookie.

Original issue reported on code.google.com by mayhe...@gmail.com on 27 Apr 2012 at 1:26

GoogleCodeExporter commented 8 years ago

Original comment by mayhe...@gmail.com on 27 Apr 2012 at 1:27

GoogleCodeExporter commented 8 years ago

Original comment by mayhe...@gmail.com on 8 May 2012 at 11:05