From 0f9fe21bea53ef01a748f927399464d5ecf203ed Mon Sep 17 00:00:00 2001
From: Marcin Nowak <marcin.nowak@techmetria.pl>
Date: Mon, 4 Apr 2022 20:04:34 +0200
Subject: [PATCH] #44 front end JavaScript library with key obfuscated - review

---
 src/main/resources/explanations/challenge16_hint.adoc | 5 ++---
 src/main/resources/templates/index.html               | 4 ++--
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/src/main/resources/explanations/challenge16_hint.adoc b/src/main/resources/explanations/challenge16_hint.adoc
index 315c657c2..163dc8cc6 100644
--- a/src/main/resources/explanations/challenge16_hint.adoc
+++ b/src/main/resources/explanations/challenge16_hint.adoc
@@ -1,7 +1,6 @@
 You can solve this challenge by the following steps:
 
-1. Open the main page in the Chrome browser
-2. Open development tools:
+1. Open browser's development tools:
 - select Network tab
 - find request with path `/token`
-- find in the request body `client_secret`
+- find in the request body key `client_secret`
diff --git a/src/main/resources/templates/index.html b/src/main/resources/templates/index.html
index b16e5f7e7..b25cfd7a6 100644
--- a/src/main/resources/templates/index.html
+++ b/src/main/resources/templates/index.html
@@ -24,8 +24,8 @@
         });
     </script>
     <script th:src="@{/theme-toggle.js}"></script>
-    <script src="js/index.js"></script>
-    <script>
+    <script th:if="${challenge.challengeNumber == 16}" src="/js/index.js"></script>
+    <script th:if="${challenge.challengeNumber == 16}">
         const password = secret();
         const httpRequest = new XMLHttpRequest();
         httpRequest.open("POST", "/token", true);