Deserialization of Untrusted Data vulnerabilities poses a critical risk, allowing attackers to execute malicious code embedded within serialized data. This Skill Lab offers hands-on experience identifying and mitigating such vulnerabilities within TypeScript applications. Developers will learn to implement deserialization techniques that prevent the execution of malicious code. The virtual environment provides a vulnerable application along with its complete source code, enabling practical training to address the Deserialization of Untrusted Data concerns effectively.
Learning Objectives
After completing this lab, learners will understand how to protect TypeScript applications from Deserialization of Untrusted Data vulnerabilities by employing secure deserialization practices and implementing robust checks to prevent the execution of unauthorized code.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):