From 9a1d4a1e13cafda5c5797fc305db4d58fe4dab74 Mon Sep 17 00:00:00 2001 From: j Date: Thu, 25 May 2023 10:39:25 +0200 Subject: [PATCH] Update page 'OWASP test questions' --- OWASP test questions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/OWASP test questions.md b/OWASP test questions.md index abda1c9..1bf2b62 100644 --- a/OWASP test questions.md +++ b/OWASP test questions.md @@ -6,7 +6,7 @@ https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html * Look up and describe the same-origin security policy, from the perspective of someone writing a web front-end. * Describe some logic to monitor failed logins, and using geolocation of the incoming IP address, the permissions of the username trying to log in, and the number of previously failed logins, a procedure to determine whether to alert administrators to a genuine break-in attempt vs a brute-force attempt. * Describe the lifetime of a session-only cookie, and how this could be used to create a session authorization token. -* Describe the logic the web server should use when being presented with an authorization token which isn't in the session token database. +* Describe the logic the web server should use when being presented with a session authorization token from a user, which isn't in the server's corresponding database. ==A02==