Crowdly
Додати до Chrome
Web Security (LTAT.04.018)
Шукаєте відповіді та рішення тестів для Web Security (LTAT.04.018)? Перегляньте нашу велику колекцію перевірених відповідей для Web Security (LTAT.04.018) в moodle.ut.ee.
Отримайте миттєвий доступ до точних відповідей та детальних пояснень для питань вашого курсу. Наша платформа, створена спільнотою, допомагає студентам досягати успіху!
We want to trick the administrator of websec.ee into believing that their website was linked from edition.cnn.com.Paste below a curl one-liner that sends an HTTP GET request to https://websec.ee/web/referrer/ with a spoofed Referer header pointing to an article on edition.cnn.com.(Tip: Use Linux or download curl.exe for windows at https://curl.se/windows/)
What is the value of your browser's User-Agent header included in HTTP requests? How did you retrieve or determine this value?
Please implement an HSTS policy for your *.websec.ee website.Provide a link to your website below and upload a screenshot showing that HSTS is enforced in your browser (hint: use the Chromium browser's HSTS management UI demonstrated in the lecture).
Is the websec.ee domain considered a public suffix?Please upload a screenshot as evidence to support your answer.
Does the website https://websec.ee/ implement an HSTS policy?Please upload a screenshot as evidence to support your answer.
Write a JavaScript one-liner that, when pasted into the browser's Developer Tools console, navigates the DOM of the news.err.ee website and returns the title of the first news article. Please upload a screenshot showing the website, the console, the one-liner used and the returned title.
When opening https://websec.ee/web/redirect3/, the browser is redirected to https://www.ut.ee/.What web feature is responsible for this redirection?Upload a screenshot showing the code that caused it.
When opening https://websec.ee/web/redirect2/, the browser is redirected to https://www.ut.ee/.What web feature is responsible for this redirection?Upload a screenshot showing the code that caused it.
When opening https://websec.ee/web/redirect1/, the browser is redirected to https://www.ut.ee/.What web feature is responsible for this redirection?Upload a screenshot showing the code that caused it.