BSCP

Boundary checks

Three distinctions from the BSCP notes: who may read a response, what a session proves, and which control stops injected script.

Original concept check. Not an official exam item. Related note: access control.

Question 1 of 3

A script on another site can read an authenticated response from yours. What went wrong?

The browser refused to send the requestThe server told the browser that the other origin may read the responseThe user followed a linkThe session cookie was marked Secure