doc: added some todos

zyberzebra · Mar 20, 2024 · 8a76221 · 8a76221
1 parent 11c57f0
commit 8a76221
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/com/example/demo1/CookieVaultServlet.java b/src/main/java/com/example/demo1/CookieVaultServlet.java
@@ -10,6 +10,7 @@
 
 @WebServlet(name = "cookieVaultServlet", value = "/the-cookie-vault")
 public class CookieVaultServlet extends HttpServlet {
+    //todo remove salt and make the secret "easier" to crack and add riddle for additional clam
     public static final LocalDate CHEAP_SALT = LocalDate.now();
     public static final Algorithm ALGORITHM = Algorithm.HMAC256("tomcat"+ CHEAP_SALT);
     private String message;
@@ -24,7 +25,7 @@ public void doGet(HttpServletRequest request, HttpServletResponse response) thro
         // Hello
         String jwt = JWT.create().withClaim("Secret", "Hello Hacker. This is your price.").sign(ALGORITHM);
 
-        PrintWriter out = response.getWriter();
+        PrintWriter out = response.getWriter(); //todo html
         out.println("<html><body>");
         out.println("<h1>" + message + "</h1>");
         out.println("<div>"+ "you fond your JWT! "