CompTIA
JK0-018 · Question #356
The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) is to: (Select TWO).
The correct answer is C. Validate and filter input on the server side and client side. E. Restrict and sanitize use of special characters in input and URLs. See the full explanation below for the reasoning.
Question
The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) is to: (Select TWO).
Options
- APermit redirection to Internet-facing web URLs.
- BEnsure all HTML tags are enclosed in angle brackets, e.g., "<" and ">".
- CValidate and filter input on the server side and client side.
- DUse a web proxy to pass website requests between the user and the application.
- ERestrict and sanitize use of special characters in input and URLs.
How the community answered
(39 responses)- A8% (3)
- B3% (1)
- C72% (28)
- D18% (7)
Community Discussion
No community discussion yet for this question.