February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
284
3
부
방어
})
.on('error', function(err) {
console.error(err);
return tester.fail();
})
};
그렇다. 이 회귀 테스트는 기능 테스트와 비슷해 보인다.
기능 테스트와 취약점 테스트의 차이는 프레임워크가 아니라 테스트를 작성하는 목적이다. 이
경우
CSRF
버그의 해결 방법은 엔드포인트가
HTTP
POST
요청만 받도록 하는 것이었다. 이 회
귀 테스트는
changeSubscriptionTier
엔드포인트가
HTTP
동사를
POST
하나만 받음을 확
인한다. 향후에 코드가 변경되어
POST
이외의 동사를 사용하는 버전의 엔드포인트가 있거나
픽스를 덮어쓰는 일이 생긴다면 이 테스트는 실패하여 취약점이 재발했음을 알려줄 것이다.
취약점 회귀 테스트는 단순하다. 때로는 매우 단순하여 취약점이 발생하기도 전에 작성할 수
있다. 이것은 사소하게 보이는 변경이 큰 영향을 끼칠 수 있는 코드에 유용하다. 궁극적으로 취
약점 회귀 테스팅은 이미 종결된 취약점이 코드베이스에 다시 생기는 것을 방지하는 단순하고
효과적인 방법이다.
테스트 자체는 될 수 있으면 커밋 또는 푸시 후크에서 실행해야 한다(테스트가 실패하면 커밋
이나 푸시를 거절한다 ). 버전 제어 환경이 복잡하다면 차선책으로 정기적으로(매일 ) 실행하는 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.