Tag: security

Escape the invalid characters and continue processing the input data

Accept the input data without modifying it and log the validation error

Delete the invalid characters and continue processing the input data

Reject the entire input data and send an error message back to the user

The application does not have enough memory allocated to handle the large amount of input

The Operating System does not have enough RAM to handle large amount of input

The client does not have enough memory allocated to handle the large amount of input

A variable in the program does not have enough memory allocated to handle the amount of input

Cross-Site Scripting

SQL injection

Command injection

Directory traversal

Hidden tags

Query Strings

Header

Cookies

Hashing the password twice

Encrypting the password using the private key

Use an encryption algorithm you wrote your self so no one knows how it works

Salting the hash

Can be done as it as an internal IP

Can be done for internet facing servers as there are no chances of IP conflicts

Is a good security practice

Is a bad security practice

Should be placed securely in a folder called “temp” in the web root

Can be placed anywhere in the web root as long as there are no links to them

Should be completely removed from the server

Can be placed anywhere after changing the extension

Print the logs to a paper

Create a copy of data in your laptop/desktop

Copy the files to CD-R's

None of the above

Unvalidated input

Lack of authentication

Improper error handing

Insecure configuration management

Commercial applications

Custom built applications

In house developed applications

All of the above