message: Update XSS2 test but keep it disabled
diff: @@ -8,19 +8,30 @@ describe('/#/register', () => {
  describe('challenge "xss2"', () => {
  xit('should be possible to bypass validation by directly using Rest API', () => {
  - const EC = protractor.ExpectedConditions
  + browser.executeScript(() => {
  + var xhttp = new XMLHttpRequest()
  + xhttp.onreadystatechange = function () {
  + if (this.status === 201) {
  + console.log('Success')
  + }
  + }
  - browser.executeScript('var $http = angular.element(document.body).injector().get(\'$http\'); $http.post(\'/api/Users\', {email: \'<iframe src="javascript:alert(xss)">\', password: \'xss\'});')
  + xhttp.open('POST', 'http://localhost:3000/api/Users/', true)
  + xhttp.setRequestHeader('Content-type', 'application/json')
  + xhttp.send(JSON.stringify({ 'email': '<iframe src="javascript:alert(`xss`)">', 'password': 'XSSed', 'isAdmin': true }))
  + })
  + const EC = protractor.ExpectedConditions
  browser.get('/#/administration')
  browser.wait(EC.alertIsPresent(), 5000, "'xss' alert is not present")
  browser.switchTo().alert().then(alert => {
  expect(alert.getText()).toEqual('xss')
  alert.accept()
  })
  - })
  - // protractor.expect.challengeSolved({ challenge: 'XSS Tier 2' })
  + // FIXME Update user email afterwards to prevent further unwanted popups to appear
  + })
  + protractor.expect.challengeSolved({ challenge: 'XSS Tier 2' })
  })
  describe('challenge "registerAdmin"', () => {
  