ryancblack/webgoat

Dangerous eval - alert(document.cookie) prevented by browser

Opened this issue · 2 comments

In the dangerous eval lesson for WebGoat 5.4, the instructions say to alert 
document.cookie to solve the lesson.  Firefox and IE prevent the cookie from 
being displayed but do not prevent the solution script from putting up a 
dialog.  The lesson is marked completed, but not because of the recommended 
solution.

Either the solution text needs to be changed or the solution should allow the 
alerting of the cookie.

Original issue reported on code.google.com by mayhe...@gmail.com on 27 Apr 2012 at 1:26

Original comment by mayhe...@gmail.com on 27 Apr 2012 at 1:27

  • Changed state: New

Original comment by mayhe...@gmail.com on 8 May 2012 at 11:05