EY interview question

Question on web applications security and attacks!