Web security | Web development part 1
Table of contents: Problem Problem Feature and deadlines vs Security Web development is less focused on how could things go wrong and more towards how to load the page faster. It's easier to attack now as it was earlier, due to the availability of various tools. Hence the dev ought to make sure, that his feature not just won't break but, also mischief can't be caused. Type of attackers Black hat hackers: cause damage, hold(encrypt) the data for some ransom, for their personal gain. Grey hat hackers: They also don't have permission to enter into the system, but they break into it. But make no damage, can report the vulnerabilities as well. They do it mostly due to curiosity. White hat hackers: Break into the system but with permissions. They get paid and so make money "bug bounties". Type of attacks: Attacks on Client side: Click jacking XSS: Cross side scripting CSRF 3rd party access Attacks on: CDN side Reso...