GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

7.2 Developing Secure Code for TYPO3

Gelöschter Nutzer 6 Fragen Aktualisiert am 27 Apr 2022

Quiz starten

Fragen in diesem Quiz (6)

  1. 1Which of the following terms refer to security vulnerabilities in software? (3)
    1. AScalar type declaration
    2. BCross-site scripting (XSS)
    3. CBounded context
    4. DAuthentication bypass (or broken authentication)
    5. EFalse vacuum theory
    6. FInjection flaws
  2. 2Is it possible to output form fields dynamically (e.g. with JavaScript) in an action? (1)
    1. AThis is not possible for security reasons
    2. BThis is possible, but requires the addition of an annotation @dontverifyrequesthash to the
      target action
    3. CThis is possible, but requires the addition of an annotation @ignorevalidation to the target
      action
    4. DThis is possible, but requires the addition of an annotation @dontvalidate to the target action
    5. EThis is possible by activating the TypoScript option persistence.enableDynamicForms
  3. 3Which of the following ViewHelpers check whether a frontend user is logged-in and is a member of the group
    “news” (UID = 5)? (2)
    1. A<f:if condition="{TSFE.loginUser.group == 5}">.
    2. B<f:security.ifHasRole role="5">
    3. C<f:security.ifHasRole role="news">
    4. D<f:security.ifAuthenticated>
    5. E<f:security.loginUser group_id="5">
  4. 4Which statements about security in Fluid are correct? (2)
    1. AFluid applies htmlspecialchars() when HTML content of a variable is output
    2. BFluid automatically removes all HTML tags if the content of a variable contains HTML code
    3. CTo protect users against XSS attacks, an exception is triggered if a variable contains HTML
      code
    4. DThe FormatRaw-ViewHelper (<f:format.raw>) can be used to output the content of variables unfiltered
    5. EAll HTML code should be passed to the FormatHtml-ViewHelper (<f:format.html>) for
      security reasons
  5. 5What is the purpose of the “FormProtectionFactory”? (1)
    1. AProtection against SQL injections
    2. BProtection against man-in-the-middle attacks
    3. CProtection against cross-site scripting (XSS) attacks
    4. DProtection against cookie theft
    5. EProtection against cross-site request forgery (CSRF)
  6. 6Which methods sanitize variables for the QueryBuilder and make the value SQL injection safe for prepared statements? (3)
    1. AThe method quoteIdentifier()
    2. BThe method quoteIdentifiers()
    3. CThe method sanitizeValue()
    4. DThe method createNamedParameter()
    5. EThe method secureQuery()

Informationen

Beschreibung
Der Nutzer hat seine Fachbereichs-Information gelöscht. Quiz am 7.2 Developing Secure Code for TYPO3, erstellt von Gelöschter Nutzer am 27/04/2022.
Autor
Gelöschter Nutzer
Sprache
English
Aufrufe
17
Verlauf
Erstellt am 27 Apr 2022 · aktualisiert am 27 Apr 2022
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck