Merge branch 'master' of https://github.com/OWASP/railsgoat

app/views/layouts/application.html.erb

@@ -9,7 +9,7 @@
 <%
 if cookies[:font]
 %>
-<style>body { font-size:<%= cookies[:font] %> !important;}</style>
+<style>body { font-size:<%= raw cookies[:font] %> !important;}</style>
 <%
 end
 %>

app/views/layouts/tutorial/credentials/_creds.html.erb

@@ -9,7 +9,7 @@
       </h4>
     </div>
     <div class="modal-body">
-      <div class="row-fluid">  
+      <div class="row">  
         <div class="span8">
 	      <p>Warning, this is a spoiler</p>
 	  	  <p>Are you sure you want to see the credentials?</p>
@@ -23,6 +23,9 @@
 		          <th>
 		            Password
 		          </th>
+				  <th>
+					API Key
+				  </th>	
 		        </tr>
 		      </thead>
 		      <tbody>
@@ -33,6 +36,9 @@
 		        	  <td>
 		        	   	admin1234 
 		        	  </td>
+					  <td>
+						1-01de24d75cffaa66db205278d1cf900bf087a737
+					  </td>	
 		        	</tr>
 					<tr>
 			          <td style="word-wrap:break-word;">
@@ -41,6 +47,9 @@
 			          <td>
 			           	yankeessuck
 			          </td>
+					  <td>
+					  	2-050ddd40584978fe9e82840b8b95abb98e4786dc
+					  </td>
 			        </tr>
 					<tr>
 			          <td style="word-wrap:break-word;">
@@ -49,6 +58,9 @@
 			          <td>
 			           	alohaowasp
 			          </td>
+			          <td>
+			          	3-eaa9b4d748d6a8c6a38e24ac1cc2204ebc3541c1
+			          </td>
 			        </tr>
 					<tr>
 			          <td style="word-wrap:break-word;">
@@ -57,6 +69,9 @@
 			          <td>
 			           	motocross1445
 			          </td>
+					  <td>
+					  	4-4c809b3d11d272cff8cab1da9e4cdf61137f29d2
+					  </td>
 			        </tr>
 					<tr>
 			          <td style="word-wrap:break-word;">
@@ -65,6 +80,9 @@
 			          <td>
 			           	citrusblend
 			          </td>
+					  <td>
+						5-4af604a848ca212cfa3935352aabe9522cf89fdc
+					  </td>	
 			        </tr>
 			   
 		      </tbody>
@@ -93,4 +111,5 @@ $('#understood').click(function() {
 	$("#creds_hidden").show();
 });
 
+
 </script>