Top AppSec Job Interview Question 9
AppSec interview questions
How to win job
Penetration testing job interview questions
AppSec job interview questions answer
top 50 cybersecurity interview questions and answers
Check out the Interview Series Playlist: • Interview Series
Question 39: Give some reasons why sending sensitive data in a URL query parameter is insecure.
Answer:
1. URLs are generally logged, by both the server and potentially proxy services in-between the user and application.
2. URLs are also saved to browser history, which may be preserved on shared public computers.
3. The data may be visible in screenshots and screen shares.
4. Users may think it is safe to copy URLs and share them.
5. If 3rd party resources are loaded by the client-side application, the data may get sent as part of the Referer header to the 3rd party.
By Tib3rius
#jobinterview #shorts #dailyinterview