Quick study sessions to strengthen memory and retain key concepts.
SQL Injection and Prepared Statements?
Prepared Statements treat inputs as data, not code. Prepared Statements use placeholders to safely insert user input into…
View Card →Statelessness in JWT Authentication?
Stateless JWT means no session data is stored server-side. In stateless JWT authentication, all the session information is…
View Card →JWT Token Structure?
JWT tokens consist of a Header, Payload, and Signature. A JWT (JSON Web Token) is a compact, URL-safe…
View Card →BCrypt Work Factor in Password Hashing?
The work factor determines the hashing complexity. The BCrypt work factor controls how computationally intensive the hashing process…
View Card →Why Salting Passwords is Crucial?
Salting ensures unique hashes for identical passwords. Salting involves adding a unique value to each password before hashing,…
View Card →Understanding Password Plaintext Consequences?
Passwords in plaintext can be directly accessed by attackers. When passwords are stored as plaintext, anyone who gains…
View Card →How does HTML Entity Encoding protect against XSS in Java web applications?
HTML Entity Encoding converts potentially dangerous characters into safe representations. HTML Entity Encoding is a technique used to…
View Card →How can backend frameworks mitigate XSS?
Through input validation and output encoding. Backend frameworks like Spring MVC can mitigate XSS by validating inputs and…
View Card →What role does a JWT's signature play?
It verifies the token hasn't been altered. The signature part of a JWT is created by hashing the…
View Card →What is Stored XSS?
A type of XSS where the malicious script is stored on the server. Stored XSS occurs when an…
View Card →