Engineering Interviews · interview question
During a code review, you notice a method that handles user authentication without input validation. What is the main risk?
Multiple choiceHardchapter-20-curatedpremiumengineering-interviewsjvm-trivia
Answer and explanation
Correct answer
A. The application is vulnerable to injection attacks.
Why
Lack of input validation in user authentication processes can lead to injection attacks, such as SQL injection, where attackers can manipulate input to access or compromise data. Ensuring robust input validation is vital for application security.
Test yourself on Engineering Interviews
A free test with instant, explained results. No account needed.
More Engineering Interviews questions
- In the context of JVM memory architecture, what is the primary role of the 'stack'?
- Why is it important to first outline a high-level design before diving into coding during a system design interview?
- During a live coding interview, why is it important to verbalize your thought process?
- What does the 'Result' component in the STAR framework mainly aim to achieve?
- Why is it crucial to agree on an algorithm before writing code in a live coding interview?
- In a code review, which type of bug is most critical to address immediately?