September 2024
Intermediate to advanced
444 pages
12h 30m
Spanish
Content preview from Seguridad de las Aplicaciones Web, 2ª Edición
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Capítulo 34. Defensa contra ataques del lado del cliente
Este trabajo se ha traducido utilizando IA. Agradecemos tus opiniones y comentarios: translation-feedback@oreilly.com
En el Capítulo 16, cubrimos ampliamente tres formas de ataque del lado del cliente (contaminación de prototipos, clickjacking y tabnabbing). En cada uno de estos ataques, pudimos explotar a los usuarios a través de sus navegadores cliente en lugar de tener que pasar por un servidor para atacar al usuario final. Los ataques del lado del cliente van en aumento a medida que los clientes de los navegadores se vuelven más sofisticados cada año.
Debido a las limitaciones que supone intentar detectar ataques del lado del cliente, es imprescindible comprender cómo configurar tu aplicación de forma que los ataques del lado del cliente sean difíciles de realizar con éxito para un atacante. En este capítulo, cubriremos esas técnicas para que tu aplicación web sea lo más segura posible cuando sea objetivo de ataques del lado del cliente.
Defensa contra la contaminación de los prototipos
Contaminación de prototipos los ataques se basan en el sistema de herencia de prototipos de JavaScript para funcionar (consulta el Capítulo 16 para obtener información detallada sobre los ataques y el desarrollo de la carga útil). Debido a la forma en que el intérprete de JavaScript recorre la cadena de prototipos en busca de funciones y datos, es muy posible que un atacante contamine un objeto sin acceso directo (contaminando un objeto ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.