Question I
CSRF was at number 5 in 2010 OWASP Top 10; it was dropped down to number 8 when the 2013 version was released. It has fallen out of the Top 10 with the 2017 version. Why is CSRF dropped from the Top 10? Explain.
Question II
XSS was number 3 in the 2013 list, why might it have been lowered to 7 in 2017?
Question III
Why can't security teams stop injection vulnerabilities so that injection is always number 1 in the OWASP top 10 lists?
Question IV
Summarize and interact with the content that was covered above (Question 1,2 and 3). In your summary, you should highlight the major topics, theories, practices, and knowledge that were covered.
Question V
Summarize XSS lab as if you are explaining it to a non-technical person. Describe at least one method that prevent XSS attacks.
Question VI
Which part of the code snippet causes the SQL injection attack? How do you fix the SQL injection.