7 terms
CSP (Content Security Policy) is an HTTP response header that tells browsers which scripts, styles and other resources a web page may load and run.
CSRF, cross-site request forgery, tricks a logged-in user's browser into sending unwanted authenticated requests to a web application that trusts it.
The OWASP Top 10 is a data-driven awareness list of the ten most critical web application security risks, used in application security for training and testing.
An SBOM is a machine-readable inventory of every component and dependency in a software product, used to track vulnerabilities, licenses and supply chain risk.
SQL injection is a vulnerability in which untrusted input changes the structure of a database query, letting attackers read or modify data.
SSRF (server-side request forgery) is a flaw that lets an attacker make a server send requests to internal or unintended network destinations.
XSS, or cross-site scripting, is an application security flaw that lets attackers run their own script in a victim's browser within a trusted site.