Test your Web-security knowledge with a free interactive quiz — 50 questions with answers and explanations. No signup needed to play.
Question 1/12Score 0
What does the `Secure` cookie attribute do?
In this round
What does the `Secure` cookie attribute do?
What is "defense in depth"?
What is "mixed content" on a web page, and why is it a security concern?
What is the OWASP Top 10?
Which is the single most effective defense against SQL injection?
What is DOM-based XSS?
A site is served on both `http://` and `https://`. What should be done?
```
const sql = `SELECT * FROM users WHERE email = '${req.body.email}'`
db.query(sql)
``` What vulnerability does this code have, and how do you fix it?
What security guarantees does HTTPS (HTTP over TLS) provide?
Why is "don't roll your own crypto" almost universally good advice?
What does "principle of least privilege" mean?
What is a "salt" in password hashing, and why is it needed?