Glossary · Phase 7 · Software engineering
Path traversal
An attack that uses ../ in a file name to reach files outside the folder an app meant to share.
Try it now
Most attacks are the same mistake: data being treated as code.
Learn it properly
Secure coding · Injection, escaping, secrets and passwords: the mistakes attackers look for. About 40 minutes.
Other terms from the same lesson
- cross-site scripting: An attack where text shown on a web page contains code that runs in visitors' browsers. Escaping the text prevents it.
- salt: A random value mixed into each password before hashing, so equal passwords get different hashes.
Never trained an AI?
Teach a small one to write, right in your browser. It takes about 20 seconds and needs no account.