diff --git a/pygoat/db.sqlite3 b/pygoat/db.sqlite3 index 2d82e9af8..30420bf73 100644 Binary files a/pygoat/db.sqlite3 and b/pygoat/db.sqlite3 differ diff --git a/pygoat/introduction/templates/Lab/sec_mis/sec_mis_lab3.html b/pygoat/introduction/templates/Lab/sec_mis/sec_mis_lab3.html index 0e866b947..c37d0a462 100644 --- a/pygoat/introduction/templates/Lab/sec_mis/sec_mis_lab3.html +++ b/pygoat/introduction/templates/Lab/sec_mis/sec_mis_lab3.html @@ -39,7 +39,7 @@


  cookie = jwt.encode(payload, SECRET_KEY, algorithm='HS256')
  response = render(request,"Lab/sec_mis/sec_mis_lab3.html", {"admin":False} )
-  response.set_cookie(key = "auth_cookie", value = cookie, httponly=True)
+  response.set_cookie(key = "auth_cookie", value = cookie)
  return response
diff --git a/pygoat/introduction/views.py b/pygoat/introduction/views.py index 65769ba2f..7d28f533b 100644 --- a/pygoat/introduction/views.py +++ b/pygoat/introduction/views.py @@ -913,5 +913,5 @@ def sec_misconfig_lab3(request): cookie = jwt.encode(payload, SECRET_KEY, algorithm='HS256') response = render(request,"Lab/sec_mis/sec_mis_lab3.html", {"admin":False} ) - response.set_cookie(key = "auth_cookie", value = cookie, httponly=True) + response.set_cookie(key = "auth_cookie", value = cookie) return response