Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
benpaddlejones authored Sep 25, 2024
1 parent 19919f6 commit 1c12793
Showing 1 changed file with 8 additions and 6 deletions.
14 changes: 8 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,13 +38,15 @@ You are to run a range of security tests and scans along with a white/grey/black
* Basic - Describe solutions that could improve the security or privacy of the PWA.
* Limited - Make simple connections about vulnerabilities and/or likely solutions.

# Teaching advice:
This app has been designed as either a teaching tool, an assessment tool or an assessment as learning tool. __As a teaching tool__ the teacher can use the app to demonstrate discrete vulnerabilities then teach the preferred patch method. __As an assessment tool__ the students should be taught the knowledge and skills, then given the app to analyse, and report on before designing and developing appropriate patches (patching all, will be time prohibitive). __As an assessment as learning tool__ teachers can teach vulnerabilities in the app then support students to design and develop patches while assessing them formatively.
> [!TIP]
> # Teaching advice:
> This app has been designed as either a teaching tool, an assessment tool or an assessment as learning tool. __As a teaching tool__ the teacher can use the app to demonstrate discrete vulnerabilities then teach the preferred patch method. __As an assessment tool__ the students should be taught the knowledge and skills, then given the app to analyse, and report on before designing and developing appropriate patches (patching all, will be time prohibitive). __As an assessment as learning tool__ teachers can teach vulnerabilities in the app then support students to design and develop patches while assessing them formatively.
# Dependencies
* VSCode
* Python 3+
* Flask (pip install flask)
> [!IMPORTANT]
> # Dependencies
> * VSCode
> * Python 3+
> * Flask (pip install flask)
# Teacher list of vulnerabilities & solutions (DELETE & SCRUB from git history)
1. Users can run SQL injections - Students should santise input before processing & table name should be a random string, not common words like "users" or "login". Note it is recommended that teachers stick to injections taught in W3Schools so as not to be seen teaching hacking.
Expand Down

0 comments on commit 1c12793

Please sign in to comment.