Tag: security

A web application security requirement stated that it must not behave differently under similar circumstances and should promise a consistent functionality even when overloaded or a tampering is attempted. The requirement is of:

If a user is able to access the privileges of higher roles than the role he has actually been assigned, he does so by intercepting and changing the values of the parameters that are sent by a browser to the server. In the case select the weakness that fits best in this scenario.

What is the best way to mitigate a Cross Site Scripting while enabling the special characters such as javascript tags to be displayed on the web browser without actually being executed?

A website currently allows a user to download the website’s backup file stored in one of the hidden folders due to vulnerability. In this context which of the following could be associated with it?

A user performs a high volume financial transaction through a bank website; however after that action the user denies that he has performed the transaction. What threat classification does this scenario relate to?