WebGoat/WebGoat-Legacy

Stored XSS Attacks challenge is not working

gartmann opened this issue · 3 comments

gartmann commented
  1. Enter a title
  2. Enter message <script>alert(document.cookie);</script>
  3. click on the generated link
    => open the javascript console and you can see following error:

Uncaught ReferenceError: showResponse is not defined

nbaars commented

Tested the issue, on my forked branch this is no longer an issue. This is probably due to the fact that a couple of pull requests from my repository have not been merged in to WebGoat/master

nbaars commented

Sorry thought this was an issue on WebGoat but it is on WebGoat-Lecacy. I don't think we need to fix this on Legacy because we are close to merging all the lessons...

misfir3 commented

Was going to (and still probably will) ask someone to specifically look at/test XSS and CSRF lessons. I specifically am not escaping to allow for this, but want to make sure it is working as intended. The showResponse is not defined is likely an intermediate version.

Either way, can we get confirmation on this for the current development branch? Thanks!