Web Security: Common Vulnerabilities And Their Mitigation - Session hijacking - count the ways

The video discusses session hijacking, a security threat where attackers steal session IDs to impersonate users. It explains various methods of session hijacking, including session fixation, side jacking, and cross-site scripting. The video also covers how session IDs are transmitted to clients via cookies, URL parameters, and hidden form fields, highlighting the security risks associated with each method. Cookies are considered the least insecure method, but still vulnerable. The video advises against passing session IDs in URLs due to security risks and recommends using POST requests for form submissions.

What are the potential risks of passing session IDs in URLs?

How can using POST requests for form submissions enhance security?