Security Test Issues for websites
A list of common security issues might have for your sites.
- XSS
Sample to check :<img src=x onerror="javascript:alert('XSS')">
- Authorization
Normal user can have access to admin/root API. This can be checked by inspecting web app by Chrome Developer Tool or Firefox Inspector. You can even copy the request as cUrl and import it to Postman to trigger
For example with…