¡GoConqr estrena diseño! Cuéntanos qué te parece.

Regístrate gratis

Test

7.2 Developing Secure Code for TYPO3

Usuario eliminado 6 preguntas Actualizado el 27 abr 2022

Hacer el test

Preguntas del test (6)

  1. 1Which of the following terms refer to security vulnerabilities in software? (3)
    1. AScalar type declaration
    2. BCross-site scripting (XSS)
    3. CBounded context
    4. DAuthentication bypass (or broken authentication)
    5. EFalse vacuum theory
    6. FInjection flaws
  2. 2Is it possible to output form fields dynamically (e.g. with JavaScript) in an action? (1)
    1. AThis is not possible for security reasons
    2. BThis is possible, but requires the addition of an annotation @dontverifyrequesthash to the
      target action
    3. CThis is possible, but requires the addition of an annotation @ignorevalidation to the target
      action
    4. DThis is possible, but requires the addition of an annotation @dontvalidate to the target action
    5. EThis is possible by activating the TypoScript option persistence.enableDynamicForms
  3. 3Which of the following ViewHelpers check whether a frontend user is logged-in and is a member of the group
    “news” (UID = 5)? (2)
    1. A<f:if condition="{TSFE.loginUser.group == 5}">.
    2. B<f:security.ifHasRole role="5">
    3. C<f:security.ifHasRole role="news">
    4. D<f:security.ifAuthenticated>
    5. E<f:security.loginUser group_id="5">
  4. 4Which statements about security in Fluid are correct? (2)
    1. AFluid applies htmlspecialchars() when HTML content of a variable is output
    2. BFluid automatically removes all HTML tags if the content of a variable contains HTML code
    3. CTo protect users against XSS attacks, an exception is triggered if a variable contains HTML
      code
    4. DThe FormatRaw-ViewHelper (<f:format.raw>) can be used to output the content of variables unfiltered
    5. EAll HTML code should be passed to the FormatHtml-ViewHelper (<f:format.html>) for
      security reasons
  5. 5What is the purpose of the “FormProtectionFactory”? (1)
    1. AProtection against SQL injections
    2. BProtection against man-in-the-middle attacks
    3. CProtection against cross-site scripting (XSS) attacks
    4. DProtection against cookie theft
    5. EProtection against cross-site request forgery (CSRF)
  6. 6Which methods sanitize variables for the QueryBuilder and make the value SQL injection safe for prepared statements? (3)
    1. AThe method quoteIdentifier()
    2. BThe method quoteIdentifiers()
    3. CThe method sanitizeValue()
    4. DThe method createNamedParameter()
    5. EThe method secureQuery()

Información

Descripción
El usuario ha eliminado su información de asignaturas Test sobre 7.2 Developing Secure Code for TYPO3, creado por Usuario eliminado el 27/04/2022.
Autor
Usuario eliminado
Idioma
English
Visitas
17
Historial
Creado el 27 abr 2022 · actualizado el 27 abr 2022
Valoración
Aún sin valoraciones
Valora este test
Valora este test

Escríbenos

¿Sobre qué es tu mensaje?

¿Qué te parece el nuevo diseño?

¿Te gusta?