Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

A03: Injection

via CodeSignal

Go to class Write review

Overview

This course demonstrates how injection flaws occur when untrusted data is used to construct queries or commands, and how parameterization or input validation can mitigate these risks in our pastebin application.

Syllabus

  • Unit 1: Introduction to Injection Vulnerabilities
  • Unit 2: SQL Injections
    • Exploiting SQL Injection Vulnerabilities
    • UNION-based Injections in Action
    • Securing Search with Parameterized Queries
    • Adding Basic Validation
  • Unit 3: XSS Injections
    • Exploiting XSS Vulnerability
    • Sanitize Content with DOMPurify
    • Enhance Server-Side Security
    • Sanitize a CommentViewer
  • Unit 4: Command Injections
    • Command Injections in Action
    • File Access Through Command Injection
    • Input Validation for Security
    • Secure File Path Construction
    • Secure Command Execution with execFile
    • File Extension Security Check

Reviews

Start your review of A03: Injection

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.