From the course: Foundational JavaScript Security
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Solution: What is secured deserialization? - JavaScript Tutorial
From the course: Foundational JavaScript Security
Solution: What is secured deserialization?
(upbeat music) - [Instructor] The answer for the question was in the video where we go over, well, secure deserialization. Without going over everything we did in that video, these are the main points we were looking for. Deserialization is the transformation of data coming from a file or the network, typically from a JSON or XML format, into an object that your application can read. So insecure deserialization is when hackers exploit untrusted data to render the applications resources useless, like a denial of service attack, or even execute code inside your application. So securing this process is crucial to protect your users.
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
-
(Locked)
Injection threat resources2m 1s
-
(Locked)
Broken authentication resources1m 8s
-
(Locked)
Sensitive data exposure resources58s
-
(Locked)
XML external entities resources1m 1s
-
(Locked)
Security misconfiguration resources1m 27s
-
(Locked)
Secure deserialization resources44s
-
(Locked)
Challenge: What is secured deserialization?31s
-
(Locked)
Solution: What is secured deserialization?51s
-
(Locked)
-