問題文
A design document states that the browser script decides whether the logged-in user may approve a payment, and that the server accepts the decision the script sends. Which design weakness does a security reviewer report?
選択肢
- The choice about the caching leaves the fastest route, so the browser can hold any copy and the server will honor the header it receives across the documented specification.
- The choice about the logging leaves the local disk, so the browser can trim any entry and the server will honor the format it receives across the stated specification.
- The choice about the rights leaves the trusted side, so the browser can send any verdict and the server will honor the claim it receives across the described specification.
- The choice about the layout leaves the printed page, so the browser can pick any spacing and the server will honor the font it receives across the recorded specification.