Demonstrate vulnerabilities and methods to counter these web security flaws.
- CSRF / XSRF (Cross-Site Request Forgery)
- XSS (Cross-Site Scripting)
- SQL injection
- Broken authentication and session management
- Insecure direct object references (access to server side files, databases, etc.)