フリー問題

問題文

The team can ship code with the page that notices when the page is changed in the browser, or check every submitted value again on the server. The attacker fully controls the customer's machine. Which pairing of statements is correct?

選択肢

1. Against full control of the machine the client revalidation is the one that still holds, and the code shipped with the page gives the unremovable layer the controlling attacker can eventually remove.
2. Against full control of the machine the client revalidation is the one that still holds, and the code shipped with the page gives the removable layer the controlling attacker can eventually remove.
3. Against full control of the machine the central revalidation is the one that still holds, and the code shipped with the page gives the removable layer the controlling attacker can eventually remove.
4. Against full control of the machine the central revalidation is the one that still holds, and the code shipped with the page gives the unremovable layer the controlling attacker can eventually remove.