Flight Lab / Security desk / 02
Lesson 02 of 05 · about 5 min
Cross-site scripting runs an attacker’s script inside the victim’s page. Cross-site request forgery rides the victim’s cookies on a request the attacker chose. SQL injection changes the query by breaking out of a string the database was supposed to treat as data.
Three reports came in. Give each one its class.