A web administrator develops a web form for users to respond to the company via a web page. Which of the following should be practiced to avoid a security risk?

The correct answer is D. Input validation. Input validation (D) is the security practice that should be implemented on web forms. When users submit data through a web form, that data must be sanitized and validated before it is processed or stored. Without input validation, attackers can submit malicious payloads. SQL…

Enterprise Security

Question

Options

ASQL injection
BXSS scripting
CClick jacking
DInput validation

How the community answered

(63 responses)

A
2% (1)
B
8% (5)
C
5% (3)
D
86% (54)

Explanation

Input validation (D) is the security practice that should be implemented on web forms. When users submit data through a web form, that data must be sanitized and validated before it is processed or stored. Without input validation, attackers can submit malicious payloads. SQL injection (A) and XSS scripting (B) are attack vectors - types of threats, not practices. Clickjacking (C) is also an attack technique. Input validation is the defensive control that mitigates all injection-class attacks, including SQL injection and cross-site scripting, by ensuring that only expected, safe data is accepted and processed by the application.

Topics

#input validation#XSS#SQL injection#web application security

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice