A malicious user can send a really long data sequence.
恶意用户会发送超长数据。
What happens if a malicious user decides to submit the form 10,000 times in a single day?
如果恶意用户决定在一天内提交 10,000次此表单，会发生什么情况呢？
This brings up a few questions: What if a malicious user hacks the underlying security mechanism itself?
这会带来几个问题：如果恶意用户攻破了底层安全机制本身，那么会怎么样？
Any code that executes in a Web browser can be tampered with, or bypassed completely, by a malicious user.
Web浏览器上运行的任何代码都可能被恶意用户篡改或者完全绕开。
If a malicious user gets hold of this key information, then the security of that host machine can be compromised very easily.
如果恶意用户获得了这些密钥信息，那么主机的安全性就很容易受到威胁。
Provides information on guarding against malicious user input.
提供有关防止恶意用户进行输入的信息。
Consider the scenario in which a malicious user USES proxy tools to hijack data sent by the browser.
考虑恶意用户用代理工具劫持由浏览器发送的数据这一情况。
A malicious user manages to get code (script) to execute by masking it as user input from a page or as a link.
恶意使用者能够取得要执行的程序码(指令码)，方法是将其伪装成页面的使用者输入或连结。
For example, a malicious user could gain access to a user's resources if the user walks away from his machine and leaves it logged in.
例如，如果用户登录之后离开了他的机器，恶意用户就可以访问他的资源。
If you create custom error messages, make sure that you do not display information that might help a malicious user compromise your application.
安全说明如果要创建自定义错误信息，请确保显示的信息不会帮助恶意用户损害您的应用程序。
When your application displays error messages, it should not give away information that a malicious user might find helpful in attacking your system.
当应用程序显示错误讯息时，不应将有助于恶意使用者攻击系统的资讯送出。
Data can be stored in the session with no direct way for a malicious user to alter it. (Bugs in your code may still give an attacker an opening, of course.)
数据可以存储在会话中，恶意用户无法直接修改它(当然，代码中的bug仍然可能产生安全漏洞)。
The most security-conscious developers distrust even their own databases, on the theory that a malicious user might have found a way to tamper with the database.
安全意识很强的开发人员甚至不信任他们自己的数据库，理由是他们认为恶意用户可能有办法篡改数据库。
Unsafe arguments are ones that include database or command line escape characters that could allow a malicious user to manipulate your application into executing arbitrary commands.
不安全参数是包含数据库或命令行转义符的参数，这些转义符可以让恶意用户操纵应用程序执行任意命令。
Directory traversal is another injection-style attack, wherein a malicious user tricks filesystem code into reading and/or writing files that the Web server shouldn't have access to.
目录遍历是另一种注入类型的攻击，攻击者欺骗文件系统读或写服务器不允许操作的文件。
Directory traversal is another injection-style attack, wherein a malicious user tricks filesystem code into reading and/or writing files that the Web server shouldn't have access to.
目录遍历是另一种注入类型的攻击，攻击者欺骗文件系统读或写服务器不允许操作的文件。
应用推荐