Flashcards

Quick study sessions to strengthen memory and retain key concepts.

Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How do stateless JWT tokens enhance scalability?

They eliminate server-side session storage, reducing server load. Stateless JWT tokens embed user data and authentication claims within…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

Why does prepared statements matter in practice?

Prepared statements prevent SQL Injection by separating SQL logic from data. Prepared statements in Java prevent SQL Injection…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

What makes BCrypt effective for password hashing?

BCrypt's adjustable work factor makes it resistant to brute-force attacks. BCrypt is a password hashing function that includes…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How does the Spring Security Filter Chain enhance security?

It processes HTTP requests through multiple filters to ensure security. The Spring Security Filter Chain is a powerful…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

Why is salting important for password security?

Salting adds unique data to each password before hashing. Salting is a security measure that appends a unique…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How would you explain a common defense against Stored XSS in a Java interview?

HTML encoding converts special characters to HTML entities. HTML encoding is crucial in Java web applications to prevent…

View Card →
Flashcard Study

Java: Cross-Site Request Forgery (CSRF)

Front

How does Spring Security protect against CSRF attacks?

Spring Security generates CSRF tokens and validates them with each request. In Spring Security, CSRF protection is enabled…

View Card →
Flashcard Study

Java: Cross-Site Request Forgery (CSRF)

Front

Discuss the design considerations of Stateless JWT tokens in Java applications?

Stateless JWT tokens must balance security with scalability. Stateless JWT tokens contain all necessary information for authentication, removing…

View Card →
Flashcard Study

Java: Cross-Site Request Forgery (CSRF)

Front

Explain the concept of BCrypt Work Factors?

BCrypt Work Factors control hashing complexity and time. BCrypt Work Factors determine how computationally intensive the hashing process…

View Card →
Flashcard Study

Java: Cross-Site Request Forgery (CSRF)

Front

Why is Salting used alongside hashing for passwords?

Salting prevents hash collision attacks by adding uniqueness. Salting involves adding a unique value to each password before…

View Card →