Challenge Overview
https://github.com/cloudspokes/google-gAudit��
Address the following:
- The POST action implemented in ProcessorServlet (line 390 shown of the master branch) checks if a user's session has timed out, but doesn't redirect to the login page if the user isn't logged in at all (doesn't handle ELSE��condition)
- The web.xml security-constraint element doesn't contain the auth-constraint/role-name elements, which are needed to restrict access to the application from unauthenticated users.
- Address all the following XSS issues by properly escaping values before adding to the DOM:
��