A security audit has determined that your web application is vulnerable to a cross-site scripting attack. Which of the following measures are appropriate when building a security policy? (Choose 2)

Question

Accepted Answer

B. Attack signature sets must be applied to any user input parameters. D. Parameter data entered for flow-level parameters must allow some meta-characters but not

Answer

A. Cookie length must be restricted to 1024 bytes.

Answer

C. Parameter data entered for explicit objects must be checked for minimum and maximum

A security audit has determined that your web application is vulnerable to a cross-site scripting attack. Which of the following measures are appropriate when building a security policy? (Choose 2)

Question

Options

How the community answered

Community Discussion