When you are on lesson: http://localhost:8080/WebGoat/start.mvc#lesson/XXE.lesson/12, if you apply the 'patch' by clicking on the button at the bottom, and then you hit 'reset lesson', the patch is still applied (or at least it says it is).

Seems like reset lesson should reset everything, including that.

Conversely, when you apply the patch, and then hit browser reload, the 'patch' goes away, which seems like that shouldn't happen. Same thing happens if you leave the XXE lesson, go to another lesson, and come back. Seems like if the patch was applied it should stay applied until you 'reset' the lesson.