Basic pattern of vulnerabilities · Question 2 of 12
Which input may a TYPO3 extension trust without checking it?
1 answer is correct. Easy
Show answer
Answer
- D No data from GET, POST or cookies
Explanation
Everything the client sends can be manipulated: parameters, form fields, headers and cookies. Hidden fields are only invisible in the browser; with the developer tools they can be changed at will.