nerdexam
EC-Council

312-92 · Question #82

Devon is writing the following code to avoid what? <script language="vb" runat="server"> Sub Application_BeginRequest(Sender as object, E as EventArgs) If (Request.Path.Indexof(chr(92)) >= 0 OR _…

The correct answer is D. Canonicalization. EC-Council 312-92 Exam

Input Validation and Sanitization

Question

Devon is writing the following code to avoid what? <script language="vb" runat="server"> Sub Application_BeginRequest(Sender as object, E as EventArgs) If (Request.Path.Indexof(chr(92)) >= 0 OR _ System.IO.Path.GetFullPath (Request.PhysicalPath) <> Request.PhysicalPath) then Throw New HttpException(404, "Not Found" End If End Sub </script>

Options

  • AType safety
  • BGET source code path
  • CParent path tampering
  • DCanonicalization

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    15% (8)
  • C
    7% (4)
  • D
    74% (40)

Explanation

EC-Council 312-92 Exam

Topics

#canonicalization#path traversal#directory traversal#input filtering

Community Discussion

No community discussion yet for this question.

Full 312-92 Practice