Manipulating the data sent between the browser and the web application to an attacker's advantage has long been a simple but effective way to make applications do things in a way the user often shouldn't be able to. Hackers can manipulate the data by:
- Using proxies to change values in any fields, including hidden files and cookies
- Circumnavigating client side validation
This kind of attack can be prevented by using strong server side validation.
|
