With parameter manipulation attacks, the attacker modifies the data sent between the client and Web application. This may be data sent using query strings, form fields, cookies, or in HTTP headers.
The following practices help secure the Web application's parameter manipulation:
- Encrypt sensitive cookie state
- Make sure users do not bypass the checks
- Validate all values sent from the client
- Do not trust HTTP header information
|
