Web Security · Senior · Question 6 of 75
A team adds a new data flow: the browser uploads files that a background worker processes. Which question is most important for the threat model?
- 1How many files the average user uploads per day
- ✓Correct answer: What can a malicious file do to the worker, and what can the worker access if it's compromised?
- 3Which color the upload button should be
Explanation
Parsers for images, PDFs and archives are a common attack surface. Isolate the worker and give it minimal permissions.