All quizzesHard
Security Architecture
Preview — 3 of 10 questions
What is Mutation XSS (mXSS) and how does it bypass HTML parsers?
AXSS that mutates user input to make it executable.
BXSS that requires multiple mutations to trigger.
CXSS that exploits differences in how browser HTML parsers handle certain inputs.
DXSS that only affects mutant browsers.
What vulnerability exists in this code?
javascript
// Deserializing untrusted data
const data = JSON.parse(userInput);
// Using it with dangerous operations
Object.assign(config, data);
eval(config.expression);APrototype pollution and code injection via eval.
BJSON.parse is always safe.
CNo vulnerability; Object.assign is safe.
DOnly vulnerable to CORS attacks.
What is the most secure way to store OAuth2 access tokens in a web application?
AStore in memory (JavaScript variable) and use HttpOnly cookies for refresh token.
BStore in sessionStorage for automatic cleanup.
CStore in localStorage for easy client-side access.
DStore in plain text in the database.
Sign up free to play
Answer all 10 questions (7 more), see explanations for every answer, and track your score.