diff --git a/src/main/java/com/example/demo1/CookieVaultServlet.java b/src/main/java/com/example/demo1/CookieVaultServlet.java
index cdc74d5..841d93e 100644
--- a/src/main/java/com/example/demo1/CookieVaultServlet.java
+++ b/src/main/java/com/example/demo1/CookieVaultServlet.java
@@ -10,6 +10,7 @@
@WebServlet(name = "cookieVaultServlet", value = "/the-cookie-vault")
public class CookieVaultServlet extends HttpServlet {
+ //todo remove salt and make the secret "easier" to crack and add riddle for additional clam
public static final LocalDate CHEAP_SALT = LocalDate.now();
public static final Algorithm ALGORITHM = Algorithm.HMAC256("tomcat"+ CHEAP_SALT);
private String message;
@@ -24,7 +25,7 @@ public void doGet(HttpServletRequest request, HttpServletResponse response) thro
// Hello
String jwt = JWT.create().withClaim("Secret", "Hello Hacker. This is your price.").sign(ALGORITHM);
- PrintWriter out = response.getWriter();
+ PrintWriter out = response.getWriter(); //todo html
out.println("");
out.println("" + message + "
");
out.println(""+ "you fond your JWT! "