IBM
C2150-810 · Question #27
You are reviewing an on-line shopping application and find a lost sink method called retrieveOrderf...) that is provided by a third party shopping framework. This method accepts order number and in…
The correct answer is B. Source. See the full explanation below for the reasoning.
Question
You are reviewing an on-line shopping application and find a lost sink method called retrieveOrderf...) that is provided by a third party shopping framework. This method accepts order number and in turn provides all information regarding that order such as items ordered, shipping and billing address, payment type, etc . Which type of custom rule should you create for this method?
Options
- ASink
- BSource
- CTaint Propagator
- DTainted Callback
- ENot Susceptible to Taint
How the community answered
(41 responses)- A7% (3)
- B78% (32)
- D2% (1)
- E12% (5)
Community Discussion
No community discussion yet for this question.