[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-571640-105":53,"doc-detail-571640-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","ba-documentation-react-security-labs-semester-spring-2024","BA Documentation - React Security Labs - Semester Spring 2024","","BA Documentation for React Security Labs in Spring 2024 (Version 1.0, dated 2024-06-13) presents a structured project report from the School of Computer Science at OST Eastern Switzerland University of Applied Sciences. It covers web security fundamentals, common vulnerabilities (OWASP Top 10 focus, including XSS and CSRF), secure React development best practices, and backend security with Flask. The report details requirements, architecture and used technologies, lab scenarios (stored/reflected XSS and CSRF setups), implementation steps, challenges, research on React version usage, and comparative analysis versus Angular and Vue, followed by verification results.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/ba-documentation-react-security-labs-semester-spring-2024/571640/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/ba-documentation-react-security-labs-semester-spring-2024/571640.png","ImageObject",442,249,{"name":88,"@type":89},"lilac","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-19","2026-10-13",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",6,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What security topics are covered in the React Security Labs report?","Question",{"text":109,"@type":110},"The document focuses on web security fundamentals and common vulnerabilities, especially Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF), including an OWASP Top 10 overview and related defensive considerations.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"What kinds of lab scenarios does the project include?",{"text":114,"@type":110},"It includes detailed XSS scenarios (stored and reflected, with different injection approaches) and CSRF scenarios, plus a vulnerable setup used to demonstrate the attacks in a controlled environment.",{"name":116,"@type":107,"acceptedAnswer":117},"How are research and results presented?",{"text":118,"@type":110},"The report includes research on web technology usage, tracking React versions across websites, and comparative analysis of security mechanisms between React, Angular, and Vue, followed by verification of functional and non-functional requirements and overall conclusions.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},571640,1792188335,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":142},3985747861865,"https://ap-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","BA Documentation  \nReact Security Labs  \nSemester: Spring 2024  \nVersion: 1.0 Date: 2024-06-13 22:12:23+02:00  \nProject Team: Natalia Gerasimenko Tim Gamma  \nProject Advisor: Cyrill Brunschwiler Co-Examiner: Thomas Risch Co-Reader: Frieder Loch  \nSchool of Computer Science  \nOST Eastern Switzerland University of Applied Sciences  \nContents  \nI Management Summary 1  \n1 Abstract and Management Summary 2  \n1.1 Abstract ............................................ 2  \n1.2 Management Summary .................................... 3  \n1.2.1 Task .......................................... 3  \n1.2.2 Approach ....................................... 3  \n1.2.3 Results ........................................ 4  \n1.2.4 Future Directions ................................... 4  \nII Introduction 5  \n2 Introduction 6  \n2.1 Initial Situation ........................................ 6  \n2.2 Task .............................................. 6  \n2.3 Approach ........................................... 6  \nIII Project Documentation 8  \n3 Theory 9  \n3.1 Web Security Fundamentals ................................. 9  \n3.1.1 The Essentials of Web Security ........................... 9  \n3.1.2 Ethical Hacking and Educational Objectives .................... 10  \n3.2 Common Web Vulnerabilities ................................ 11  \n3.2.1 Quick Guide to the OWASP Top 10 ........................ 11  \n3.2.2 Cross-Site Scripting / XSS ............................. 13  \n3.2.3 Cross-Site Request Forgery / CSRF ........................ 19  \n3.2.3.1 CSRF Vulnerability ............................ 19  \n3.2.3.2 CSRF Token ................................ 22  \n3.3 React and Web Security ................................... 24  \n3.3.1 What is React .................................... 24  \n3.3.2 React Speci􀀌c Vulnerabilities ............................ 24  \nCONTENTS ii  \n3.3.3 Best Practices for Secure React Development ................... 25  \n3.4 Flask and Backend Security ................................. 26  \n3.5 Security Tool: Burp Suite .................................. 26  \n4 Analysis and Design 27  \n4.1 Requirements ......................................... 27  \n4.1.1 Functional Requirements .............................. 28  \n4.1.2 Non-Functional Requirements ............................ 31  \n4.1.3 Rejected Requirements ................................ 34  \n4.2 Inheriting and Adapting ChocoShop for React Security Labs .............. 34  \n4.2.1 Adaptation Process ................................. 34  \n4.2.2 Integration of Additional Tools ........................... 34  \n4.2.3 Project Theme Decision: Cheese Webshop ..................... 35  \n4.3 Focus and Scope Clari􀀌cation ................................ 35  \n4.4 Architecture .......................................... 35  \n4.4.1 Used Technologies .................................. 40  \n4.4.1.1 Frontend .................................. 40  \n4.4.1.2 Backend .................................. 40  \n4.4.2 Deployment of Labs to the Hacking Lab Platform ................ 41  \n4.4.2.1 Docker Containerization .......................... 42  \n4.4.2.2 Packaging and Delivery .......................... 43  \n4.5 Selected Scenarios ...................................... 44  \n4.5.1 Choosing Focus: XSS, CSRF, and Vulnerable Setup ............... 44  \n4.5.2 Detailed Security Scenarios ............................. 46  \n4.5.2.1 Stored XSS Attack-JSON Injection ................... 46  \n4.5.2.2 Stored XSS Attack-Script Injection ................... 49  \n4.5.2.3 Re􀀍ected XSS Attack-URL Based Injection .............. 53  \n4.5.2.4 XSS Scenarios Overview ......................... 56  \n4.5.2.5 CSRF Attack-with JSON ........................ 57  \n4.5.2.6 Vulnerable Setup .............................. 61  \n5 Implementation 64  \n5.1 Implementation Steps .................................... 64  \n5.2 Challenges ........................................... 66  \n5.2.1 Realistic Simulation of Vulnerabilities ....................... 66  \n5.2.","cbCaibdvGMgLN8uw","https://ap.wps.com/l/cbCaibdvGMgLN8uw","pdf",17633070,133,"English","# Management Summary\n## Abstract and Management Summary\n### Task\n### Approach\n### Results\n### Future Directions\n# Introduction\n## Initial Situation\n## Task\n## Approach\n# Project Documentation\n## Theory\n### Web Security Fundamentals\n### Common Web Vulnerabilities\n### React and Web Security\n### Flask and Backend Security\n### Security Tool: Burp Suite\n## Analysis and Design\n### Requirements\n### Architecture\n### Selected Scenarios\n## Implementation\n## Research\n# Results\n## Verification of Functional Requirements\n## Verification of Non-Functional Requirements\n## Conclusion\n# Appendix\n## Bibliography\n## List of Figures","[{\"question\":\"What security topics are covered in the React Security Labs report?\",\"answer\":\"The document focuses on web security fundamentals and common vulnerabilities, especially Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF), including an OWASP Top 10 overview and related defensive considerations.\"},{\"question\":\"What kinds of lab scenarios does the project include?\",\"answer\":\"It includes detailed XSS scenarios (stored and reflected, with different injection approaches) and CSRF scenarios, plus a vulnerable setup used to demonstrate the attacks in a controlled environment.\"},{\"question\":\"How are research and results presented?\",\"answer\":\"The report includes research on web technology usage, tracking React versions across websites, and comparative analysis of security mechanisms between React, Angular, and Vue, followed by verification of functional and non-functional requirements and overall conclusions.\"}]","BA Documentation - React Security Labs - Semester Spring 2024 | PDF",1791922868,47]