Security

No questions match those filters.

1. 01 Explain the difference between stored, reflected, and DOM-based XSS. Medium
2. 02 Design safeguards to prevent XSS in a rich text editor that renders user-generated HTML. Hard
3. 03 Explain how CSRF attacks work and how tokens prevent them. Medium
4. 04 Design CSRF protection for a SPA that uses cookie-based authentication. Hard
5. 05 Explain Content Security Policy and how it mitigates XSS. Medium
6. 06 Design a CSP for an app that uses inline scripts from a third-party analytics tool. Hard
7. 07 Explain how CORS preflight requests work. Medium
8. 08 Debug a CORS error where credentials aren't being sent despite a correct Access-Control-Allow-Origin. Hard
9. 09 Explain how JWTs work and their tradeoffs versus server-side sessions. Medium
10. 10 Design a token refresh strategy for a SPA using short-lived JWTs and refresh tokens. Hard
11. 11 Explain the OAuth 2.0 Authorization Code flow with PKCE for a frontend app. Medium
12. 12 Design a login flow for a SPA integrating with a third-party OAuth provider. Hard
13. 13 Explain the HttpOnly, Secure, and SameSite cookie attributes. Medium
14. 14 Design an authentication cookie strategy resistant to XSS and CSRF. Hard
15. 15 Explain the difference between SameSite=Strict, Lax, and None. Medium
16. 16 Debug a third-party embedded widget that stopped working after browsers changed default SameSite behavior. Hard
17. 17 Explain clickjacking and how X-Frame-Options or CSP frame-ancestors prevent it. Medium
18. 18 Design frame-busting protections for a payment confirmation page. Hard