Syllabus point: Vulnerabilities in user action controls

Design, develop and implement secure code to minimise vulnerabilities in user action controls.

Module

Secure software architecture

Section

Developing secure code

Includes

• broken authentication
• session management
• cross-site scripting
• XSS
• cross-site request forgery
• CSRF
• invalid forwarding
• redirecting
• race conditions