Least Privilege Principle

Code at risk Zone

Report a typo

Consider the Pseudocode snippet below:

isAdmin = false

if isAdmin is true:
    # Create an admin panel link
    adminPanelTag = createLink('https://insecure-website.com/administrator-panel-yb556')
    adminPanelTag.innerText = 'Admin panel'
    # ...

# Rest of the code

Which example of broken access controls does it represents?

Select one option from the list

Access token leakage

Direct object references in URLs

Privilege escalation via parameter manipulation

___

Create a free account to access the full topic