Study. uk . com
  1. Home
  2. All questions
  3. Question 145

CompTIA Security+ study material · question 145 of 611

A developer removes server-side validation because the form already validates in the browser. What is the flaw in this reasoning?

  1. Browser validation is slower than server validation
  2. The attacker controls the client and can send any request they choose
  3. Browser validation cannot check field length
  4. Server validation is required for logging
Show the answer

Answer: B. The attacker controls the client and can send any request they choose

Client-side validation is a usability feature. Nothing stops a request being crafted directly against the endpoint.

Source: OWASP Input Validation Cheat Sheet (OWASP) — OWASP Input Validation Cheat Sheet › Introduction

Challenge yourself on this topic → Study as cards