anchor.diff:            </div>
             <div class="accordion-body in collapse" id="collapseOne" style="height: auto;">
               <div class="accordion-inner">
  -              Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor
  +	  		 <p class="desc">
  +              OWASP Description - Web applications frequently redirect and forward users to other pages and websites, and use untrusted data to determine the destination pages. Without proper validation, attackers can redirect victims to phishing or malware sites, or use forwards to access unauthorized pages.
  +  			 </p>
  +	  		 <p class="desc">
  +              Railsgoat allows the redirection to the paths previously requested but for which the user did not have access. Following authentication, the user is redirected.
  +  			 </p>
               </div>
             </div>
           </div>
  
positive.code:           </div>
            <div class="accordion-body collapse" id="collapseFour" style="height: 0px;">
              <div class="accordion-inner">
                Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor
              </div>
            </div>
          </div>  
  
negative.code:           </div>
            <div class="accordion-body collapse" id="collapseTwo" style="height: 0px;">
              <div class="accordion-inner">
     				<p class="desc">
  					The application performs zero validation of the path for which they will redirect users, following authentication. The URL parameter is used to determine where to redirect the user, if the url parameter is not present, the user will be redirect to their home page.
  	 			</p>
  				<pre class="ruby"> 
  					def create
  				      <span style="background-color:yellow">path = params[:url].present? ? params[:url] : home_dashboard_index_path</span>    
  				      begin
  				        # Normalize the email address, why not
  				        user = User.authenticate(params[:email].to_s.downcase, params[:password])
  				       # @url = params[:url]
  				      rescue Exception => e
  				      end
  
  				      if user
  				        session[:user_id] = user.user_id if User.where(:user_id => user.user_id).exists?
  				        redirect_to path
  				      else
  				        # Removed this code, just doesn't seem specific enough!
  				        #  flash[:error] = "Either your username and password is incorrect" 
  				        flash[:error] = e.message
  				        render "new"
  				      end         
  				  end
  				</pre>	
  				
              </div>
            </div>
          </div>
  