PrepAway - Latest Free Exam Questions & Answers

What is the countermeasure against XSS scripting?

Consider the following code:

If an attacker can trick a victim user to click a link like this and the web application does not validate input, then the victim’s browser will pop up an alert showing the users current set of cookies. An attacker can do much more damage, including stealing passwords, resetting your home page or redirecting the user to another web site.

What is the countermeasure against XSS scripting?

PrepAway - Latest Free Exam Questions & Answers

A.
Create an IP access list and restrict connections based on port number

B.
Replace “<” and “>” characters with ?lt; and ?gt; using server scripts

C.
Disable Javascript in IE and Firefox browsers

D.
Connect to the server using HTTPS protocol instead of HTTP

Explanation:
The correct answer contains a string which is an HTML-quoted version of the original script. The quoted versions of these characters will appear as literals in a browser, rather than with their special meaning as HTML tags. This prevents any script from being injected into HTML output, but it also prevents any user-supplied input from being formatted with benign HTML.

Topic 13, Web Based Password Cracking Techniques


Leave a Reply