working on A6 tutorial write-up now that the code is working
write-up complete for exposure
Merge branch 'top-10-2013' of github.com:OWASP/railsgoat into top-10-2013
finishing A7
finished write-up for broken auth
Merge branch 'top-10-2013' of github.com:OWASP/railsgoat into top-10-2013
fixed category number and this closes issue #35
 closes issue #30
fixes a bug introduced during the transition from info_disclosure to A6
small update to A7
fixing two A5 typos
lowering rack version for dos
I think there was a subtle bug in the intentional security bypass within the admin controller
Merge branch 'master' of github.com:OWASP/railsgoat