OWASP Vulnerabilities · interview question
What role does the 'Signature' play in a JWT?
Multiple choiceMediumchapter-17-curatedpremiumowasp-vulnerabilitiescross-site-scripting-xss
Answer and explanation
Correct answer
D. It ensures the token has not been tampered with
Why
The signature in a JWT is used to verify the source of the token and ensure its integrity. It confirms that the token has not been altered by anyone after it was issued.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential limitation of using only CSRF tokens for preventing CSRF attacks in an interview?
- In a Spring Security filter chain, what is the purpose of filters?
- Why does the 'signature' in a JWT matter in this design?
- How would you explain a key strategy Java web applications use to protect against Stored XSS attacks in an interview?
- Which of the following best describes a CSRF attack?
- How does Spring Security validate that a CSRF token is legitimate upon receiving a form submission?