O GoConqr está de visual novo! Conte para nós o que você achou.

Registre-se grátis

Quiz

7.2 Developing Secure Code for TYPO3

Usuário eliminado 6 perguntas Atualizado em 27 abr 2022

Fazer o quiz

Perguntas do quiz (6)

  1. 1Which of the following terms refer to security vulnerabilities in software? (3)
    1. AScalar type declaration
    2. BCross-site scripting (XSS)
    3. CBounded context
    4. DAuthentication bypass (or broken authentication)
    5. EFalse vacuum theory
    6. FInjection flaws
  2. 2Is it possible to output form fields dynamically (e.g. with JavaScript) in an action? (1)
    1. AThis is not possible for security reasons
    2. BThis is possible, but requires the addition of an annotation @dontverifyrequesthash to the
      target action
    3. CThis is possible, but requires the addition of an annotation @ignorevalidation to the target
      action
    4. DThis is possible, but requires the addition of an annotation @dontvalidate to the target action
    5. EThis is possible by activating the TypoScript option persistence.enableDynamicForms
  3. 3Which of the following ViewHelpers check whether a frontend user is logged-in and is a member of the group
    “news” (UID = 5)? (2)
    1. A<f:if condition="{TSFE.loginUser.group == 5}">.
    2. B<f:security.ifHasRole role="5">
    3. C<f:security.ifHasRole role="news">
    4. D<f:security.ifAuthenticated>
    5. E<f:security.loginUser group_id="5">
  4. 4Which statements about security in Fluid are correct? (2)
    1. AFluid applies htmlspecialchars() when HTML content of a variable is output
    2. BFluid automatically removes all HTML tags if the content of a variable contains HTML code
    3. CTo protect users against XSS attacks, an exception is triggered if a variable contains HTML
      code
    4. DThe FormatRaw-ViewHelper (<f:format.raw>) can be used to output the content of variables unfiltered
    5. EAll HTML code should be passed to the FormatHtml-ViewHelper (<f:format.html>) for
      security reasons
  5. 5What is the purpose of the “FormProtectionFactory”? (1)
    1. AProtection against SQL injections
    2. BProtection against man-in-the-middle attacks
    3. CProtection against cross-site scripting (XSS) attacks
    4. DProtection against cookie theft
    5. EProtection against cross-site request forgery (CSRF)
  6. 6Which methods sanitize variables for the QueryBuilder and make the value SQL injection safe for prepared statements? (3)
    1. AThe method quoteIdentifier()
    2. BThe method quoteIdentifiers()
    3. CThe method sanitizeValue()
    4. DThe method createNamedParameter()
    5. EThe method secureQuery()

Informações

Descrição
O usuário eliminou as informações de disciplina Quiz sobre 7.2 Developing Secure Code for TYPO3, criado por Usuário eliminado em 27-04-2022.
Autor
Usuário eliminado
Idioma
English
Visualizações
17
Histórico
Criado em 27 abr 2022 · atualizado em 27 abr 2022
Avaliação
Ainda sem avaliações
Avalie este quiz
Avalie este quiz

Fale Conosco

Sobre o que é sua mensagem?

O que você acha do novo visual?

Você gostou?