LAB 349 – Defending TypeScript Applications Against SQL Injection (NEW)

Course Overview

SQL Injection is a vulnerability that allows malicious actors to manipulate the syntax of database queries. Exploiting SQL Injection will most commonly enable attackers to extract arbitrary data from the database. Sometimes, SQL injection allows for the manipulation of data in the database. Under certain conditions, SQL Injection might allow manipulation of application functionality, such as bypassing authentication controls or executing arbitrary code on the database server.

This Skill Lab provides a virtual environment that contains a vulnerable application with its complete source code for training developers to identify and remediate SQL Injection vulnerabilities.

In this lab, the learner will receive hands-on experience testing for an SQL Injection vulnerability and implementing an appropriate mitigation. The typical solutions include replacing code that concatenates untrusted data into query syntax with code that uses prepared statements, parameterized stored procedures, or database access methods that do not require SQL syntax, such as object-relational mapping.