CSRF Challenge 7 - Incorrect parameter name
I'm not 100% sure that this is a bug or if it is intentional. If it is by intention then this issue can be closed right away.
In CSRF Challenge 7 you are asked to provide the CSRF-token in the parameter csrf
but that causes server to throw an error. When renaming the parameter with the CSRF-payload to csrfToken
it work as expected hence the instruction text should be updated.