Posts

JavaScript Primitive Data Types

By -
 JavaScript Primitive Data Types Why JS Loosely typed and Dynamic language? In JavaScript variable not directly associated with any value type and can be assigned and re assigned values of all types.  example           let item = 2;           item= 'bag';           item = true; Primitive Data Types "A Primitive is data that is not object and has no methods." string number bigint boolean undefined symbol null All primitives are immutable( can be replace but cannot directly alter ) variable can be re assign to new value but existing value can not change in the way objects, arrays and functions altered . example / /string methods doesn't mutate string var name = "JHON" console.log(name) // JHON name.toLowerCase(); console.log(name) // JHON   //array methods mutate the array var myArray = [] console.log(myArray); // [] myArray.push("car") console.log(myArray); // ["car"]   //asignment assign primitive a new value but not a mutated value n
Post a Comment
Read more

Google Drive API (oauth 2.0) Upload Files Java

By -
Image
Upload Files Java Google Drive Create Credentials Follow previous : Create Credentials Add Dependencies to Maven Project 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 <!-- https://mvnrepository.com/artifact/com.google.apis/google-api-services-drive --> <dependency> <groupId> com.google.apis </groupId> <artifactId> google-api-services-drive </artifactId> <version> v3-rev105-1.23.0 </version> </dependency> <!-- https://mvnrepository.com/artifact/com.google.api-client/google-api-client --> <dependency> <groupId> com.google.api-client </groupId> <artifactId> google-api-client </artifactId> <version> 1.23.0 </version> </dependency> <!-- https://mvnrepository.com/artifact/com.google.oauth-client/google-oauth-client-jetty --> <dependency> <
1 comment
Read more

Create Credentials Google Drive API

By -
Image
Google Drive via Google Drive API Get Credentials Create Project on Google API Console and Credentials for Project Download Credentials to the PC Log into Gmail account and access following link https://console.developers.google.com/start/api?id=drive Click Continue Click Go to credentials Click Cancel to skip On  OAuth consent screen Enter Email and App Name and Save Create Credentials Download Credentials and Save to the PC
Post a Comment
Read more

CSRF - Double Submit Cookie

By -
Image
Cross-site Request Forgery protection in web application Double Submit Cookie Send Random Value in both Cookie and request Server Verify matching of Cookie Value and Requested Value About Application Java Based Web application which has simple hard coded login page User login to the application with user name "asd" and pssword "123" Login Upon login, generate session identifier and set a cookie in the browser. At the same time, generate the CSRF token for the session and set a cookie in the browser. The CSRF token value is not stored in the server side. Store as a Cookie Generate Token Generated Token Value Cookie In Browser The webpage that has a HTML form. The method is POST. When the HTML form is loaded, run a javascript which reads the CSRF token cookie value in the browser and add a hidden field to the HTML form modifying the DOM.  Script When the form is submitted to the action,
Post a Comment
Read more

CSRF - Synchronizer Token Pattern

By -
Image
Cross-site Request Forgery protection in web application Synchronizer Token Pattern State Changing Operations Requires Secure Random Token to prevent CSRF Attacks. Characteristics Unique per user session Large Random Value Generated By Cryptographically secure random number generator The CSRF token is added as a hidden field for forms or within the URL if the state changing operation occurs The Server rejects if CSRF token validation Fails About Application Java Based Web application which has simple hard coded login page User login to the application with user name "asd" and pssword "123" LoginForm Upon successful login session id generates and store as a cookie in browser Store Cookie Session Cookie At the same time Generates CSRF token and store in server side Generate CSRF Token Generated CSRF Token Method GenerateCSRFToken Method GenerateCSRFToken The End Point Acc
Post a Comment
Read more

CSRF

By -
Image
Cross-Site Request Forgery ( CSRF) What is CSRF? Cross-Site Request Forgery (CSRF) is an attack that focuses an end user to execute harmful actions on web application. The user should be authenticated user. Attacker can trick user to visit attacker’s domain. Then using CSRF attack, attacker can force user to perform state changing requests. For example, change email, bank details Example :Changing users email User loges in to web application (exmple.com)   hosted on attacker.com User visits attacker’s domain.: Attacker domain(attacker.com) The attacker tricks user’s browser into sending request that changes users email in the web application hosted on the domain example.com . When the request is sent to the domain example.com , The users authentication cookie appended to the outgoing cross site request .In this way web application knows whose email should be changed. Next the request is processed by the web application hosted on the domain example.
Post a Comment
Read more