Oracle
1Z0-807 · Question #51
Which two measures are most effective in protecting websites from cross site scripting (XSS) attacks?
The correct answer is C. Ensure that the session cookie is sent only on UTTPS connections. E. Execute all user-supplied scripts in a server-side sandbox. See the full explanation below for the reasoning.
Question
Which two measures are most effective in protecting websites from cross site scripting (XSS) attacks?
Options
- AEscape "<" and ">" parameters that displayed or evaluated by the JavaScript interpreter.
- BURL-encode "<" and ">"parameters so they will never be evaluated by the JavaScript Interpreter.
- CEnsure that the session cookie is sent only on UTTPS connections.
- DTreat all user-supplied input as unsafe, and white list known good characters
- EExecute all user-supplied scripts in a server-side sandbox.
How the community answered
(23 responses)- A9% (2)
- B4% (1)
- C83% (19)
- D4% (1)
Community Discussion
No community discussion yet for this question.