secure-code-warrior-for-github[bot]
commented
1 year ago Micro-Learning Topic: Clickjack (Detected by phrase)
Matched on "clickjack"
Clickjacking, which is also called UI redressing, is a trick which places an invisible panel or an identical control overlay in front of an existing application. The user clicking on that control or page is then used to perform some other action on behalf of that user i.e. Liking a social media page or posting a tweet. The click is then also passed on to the underlying application and the user is unaware that their identity has been misused.
Try a challenge in Secure Code Warrior
Micro-Learning Topic: Information disclosure (Detected by phrase)
Matched on "Information Disclosure"
Many web applications and APIs do not properly protect sensitive data, such as financial, healthcare, and PII. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data may be compromised without extra protection, such as encryption at rest or in transit, and requires special precautions when exchanged with the browser. Source: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project
View the following link to download the report. RunnerID:5239783742