-
1
Csrf and xssTimes asked 2Official solution
SimpleCSRF: attacker tumhari logged-in browser se unwanted POST. CSRF token form mein proof hai request genuine hai.
Viva tipFlask-WTF CSRF protect karta hai. Token bina POST reject.
Community answers
No replies yet
No community answers yet
Open My solution to be the first to share yours.
My solution
Not submitted yet
-
2
What is privacy and securityTimes asked 2Official solution
SimplePrivacy personal data minimize. Security attacks rokna CIA. Overlap not same.
GDPR vs firewall example.
Browser + API ke beech extra darwaze: CORS origin allow, HTTPS encrypt transit, CSRF cookie-auto-send attack, XSS HTML inject, SQL injection raw query.
MAD2 SPA: Vue :8080 Flask :5000 → Flask-CORS. JWT localStorage XSS se chori ho sakta —
v-htmluser input pe avoid. Password Network tab localhost pe dikhega; prod HTTPS, response mein password echo nahi.401 unauthenticated, 403 unauthorized, 400 validation. Hash one-way — SHA decrypt nahi hota. Secret key
.env, GitHub pe nahi.Project example: Don't return other users' emails to normal user API.
Community answers
No replies yet
No community answers yet
Open My solution to be the first to share yours.
My solution
Not submitted yet
-
3
For all questions if you can answer him with confidence then you are good to go else you may be in deep trouble.Times asked 2Official solution
SimpleViva wrap-up hai. Short thanks + confirm submission ZIP latest hai.
Community answers
No replies yet
No community answers yet
Open My solution to be the first to share yours.
My solution
Not submitted yet