GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

7.2 Developing Secure Code for TYPO3

Deleted user 6 questions Updated 27 Apr 2022

Take the quiz

Questions in this quiz (6)

  1. 1Which of the following terms refer to security vulnerabilities in software? (3)
    1. AScalar type declaration
    2. BCross-site scripting (XSS)
    3. CBounded context
    4. DAuthentication bypass (or broken authentication)
    5. EFalse vacuum theory
    6. FInjection flaws
  2. 2Is it possible to output form fields dynamically (e.g. with JavaScript) in an action? (1)
    1. AThis is not possible for security reasons
    2. BThis is possible, but requires the addition of an annotation @dontverifyrequesthash to the
      target action
    3. CThis is possible, but requires the addition of an annotation @ignorevalidation to the target
      action
    4. DThis is possible, but requires the addition of an annotation @dontvalidate to the target action
    5. EThis is possible by activating the TypoScript option persistence.enableDynamicForms
  3. 3Which of the following ViewHelpers check whether a frontend user is logged-in and is a member of the group
    “news” (UID = 5)? (2)
    1. A<f:if condition="{TSFE.loginUser.group == 5}">.
    2. B<f:security.ifHasRole role="5">
    3. C<f:security.ifHasRole role="news">
    4. D<f:security.ifAuthenticated>
    5. E<f:security.loginUser group_id="5">
  4. 4Which statements about security in Fluid are correct? (2)
    1. AFluid applies htmlspecialchars() when HTML content of a variable is output
    2. BFluid automatically removes all HTML tags if the content of a variable contains HTML code
    3. CTo protect users against XSS attacks, an exception is triggered if a variable contains HTML
      code
    4. DThe FormatRaw-ViewHelper (<f:format.raw>) can be used to output the content of variables unfiltered
    5. EAll HTML code should be passed to the FormatHtml-ViewHelper (<f:format.html>) for
      security reasons
  5. 5What is the purpose of the “FormProtectionFactory”? (1)
    1. AProtection against SQL injections
    2. BProtection against man-in-the-middle attacks
    3. CProtection against cross-site scripting (XSS) attacks
    4. DProtection against cookie theft
    5. EProtection against cross-site request forgery (CSRF)
  6. 6Which methods sanitize variables for the QueryBuilder and make the value SQL injection safe for prepared statements? (3)
    1. AThe method quoteIdentifier()
    2. BThe method quoteIdentifiers()
    3. CThe method sanitizeValue()
    4. DThe method createNamedParameter()
    5. EThe method secureQuery()

Information

Description
User has deleted their subject information Quiz on 7.2 Developing Secure Code for TYPO3, created by Deleted user on 27/04/2022.
Author
Deleted user
Language
English
Views
17
History
Created on 27 Apr 2022 · updated on 27 Apr 2022
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?