Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stored XSS Attacks challenge is not working #43

Open
gartmann opened this issue Mar 3, 2015 · 3 comments
Open

Stored XSS Attacks challenge is not working #43

gartmann opened this issue Mar 3, 2015 · 3 comments
Assignees

Comments

@gartmann
Copy link

gartmann commented Mar 3, 2015

  1. Enter a title
  2. Enter message <script>alert(document.cookie);</script>
  3. click on the generated link
    => open the javascript console and you can see following error:

Uncaught ReferenceError: showResponse is not defined

@gartmann gartmann changed the title Stored XSS Attacks not working Stored XSS Attacks challenge is not working Mar 3, 2015
@nbaars
Copy link
Contributor

nbaars commented Jul 12, 2015

Tested the issue, on my forked branch this is no longer an issue. This is probably due to the fact that a couple of pull requests from my repository have not been merged in to WebGoat/master

@nbaars
Copy link
Contributor

nbaars commented Jul 12, 2015

Sorry thought this was an issue on WebGoat but it is on WebGoat-Lecacy. I don't think we need to fix this on Legacy because we are close to merging all the lessons...

@misfir3
Copy link

misfir3 commented Aug 26, 2015

Was going to (and still probably will) ask someone to specifically look at/test XSS and CSRF lessons. I specifically am not escaping to allow for this, but want to make sure it is working as intended. The showResponse is not defined is likely an intermediate version.

Either way, can we get confirmation on this for the current development branch? Thanks!

ilatypov referenced this issue in ilatypov/WebGoat-Legacy Oct 30, 2015
…that the task does not mention clicking the message and the solution shows an incorrect img URL. Comment #43.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants