Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Defending TypeScript Applications Against Unrestricted Upload of File with Dangerous Type
Unrestricted Upload vulnerabilities occur when an application allows attackers to upload dangerous files to the application server. The attackers can then execute the malicious code and take control of the application or server. Such malicious activity can be prevented by only allowing certain types of files to be uploaded and storing uploaded files in a location where they won't be executed as code.
Course Overview
Learning Objectives
This Defending TypeScript Skill Lab provides a virtual environment containing a vulnerable application and its source code, providing developers with hands-on experience identifying and fixing Unrestricted Upload of Files with Dangerous Type vulnerabilities.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Work Roles
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.