CompTIA
CAS-003 · Question #223
It has come to the IT administrator's attention that the "post your comment" field on the company blog page has been exploited, resulting in cross-site scripting attacks against customers reading…
The correct answer is B. Filter metacharacters. A general rule of thumb with regards to XSS is to "Never trust user input and always filter meta-
Technical Integration of Enterprise Security
Question
It has come to the IT administrator's attention that the "post your comment" field on the company blog page has been exploited, resulting in cross-site scripting attacks against customers reading the blog. Which of the following would be the MOST effective at preventing the "post your comment" field from being exploited?
Options
- AUpdate the blog page to HTTPS
- BFilter metacharacters
- CInstall HIDS on the server
- DPatch the web application
- EPerform client side input validation
How the community answered
(17 responses)- A6% (1)
- B82% (14)
- E12% (2)
Explanation
A general rule of thumb with regards to XSS is to "Never trust user input and always filter meta-
Topics
#XSS prevention#input validation#metacharacter filtering#web application security
Community Discussion
No community discussion yet for this question.