Shellshock vulnerability testing
use unordered list for Resources