An IS auditor discovers that validation controls in a web application have been moved from the server side into the browser to boost performance. This would
MOST likely increase the risk of a successful attack by:
An IS auditor discovers that validation controls in a web application have been moved from the server side into the browser to boost performance. This would
MOST likely increase the risk of a successful attack by:
If validation controls are moved from the server side to the browser, it means that input validation is relying on the client side, which can be easily bypassed or manipulated by an attacker using tools such as JavaScript. This makes web applications more vulnerable to SQL injection attacks where malicious SQL queries can be sent to the server. Therefore, the most likely increased risk would be SQL injection.
C. structured query language (SQL) injection.
An attacker can use JavaScript or other tools in the browser to generate and send malicious SQL queries.