SVIG/python-bootcamp
7
0
Fork 1
Code Issues Pull Requests 1 Releases Wiki Activity

Update page 'OWASP test questions'

j
2023-05-25 10:39:25 +02:00
parent abf7480d83
commit 9a1d4a1e13
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
OWASP test questions.md
+1 -1
@@ -6,7 +6,7 @@ https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html
* Look up and describe the same-origin security policy, from the perspective of someone writing a web front-end.
* Describe some logic to monitor failed logins, and using geolocation of the incoming IP address, the permissions of the username trying to log in, and the number of previously failed logins, a procedure to determine whether to alert administrators to a genuine break-in attempt vs a brute-force attempt.
* Describe the lifetime of a session-only cookie, and how this could be used to create a session authorization token.
* Describe the logic the web server should use when being presented with an authorization token which isn't in the session token database.
* Describe the logic the web server should use when being presented with a session authorization token from a user, which isn't in the server's corresponding database.
==A02==