message: Update category and supply preliminary hint URL
diff: key: exposedMetricsChallenge
  -
  name: 'CSRF'
  - category: 'Cross-Origin Issues'
  + category: 'Broken Access Control'
  description: 'Change the name of a user by performing Cross-Site Request Forgery from <a href="http://htmledit.squarefree.com">another origin</a>.'
  difficulty: 3
  hint: 'Find a form which updates the username and then construct a malicious page in the online HTML editor.'
  - hintUrl: ''
  + hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#change-the-name-of-a-user-by-performing-cross-site-request-forgery-from-another-origin'
  key: csrfChallenge
  