contestada

You're researching a recent XSS attack against a web
application. The developer showed you the JavaScript code
used to sanitize and validate input in the browser; even if
you're not a coder, it seems like it would have prevented the
attack. What is the most likely reason the web application
was vulnerable? Choose the best response.

A. Client-side validation can be easily bypassed.
B. Input validation doesn't reliably protect against XSS
attacks.
C. Server-side validation can be easily bypassed.
D. The attacker performed an injection attack to bypass
input validation.

Respuesta :

Lanuel

The most likely reason the web application  was vulnerable to a cross-site scripting (XSS) attack is: A. Client-side validation can be easily bypassed.

Cross-site scripting (XSS) attack can be defined as a security vulnerability through which malicious scripts are injected by an attacker into benign and trusted web application or website.

This ultimately implies that, a cross-site scripting (XSS) attack makes it possible for an attacker to inject malicious client-side scripts into benign and trusted web application or website that are viewed by others. Also, an XXS attack doesn't target server-side scripting languages such as:

  • Python
  • PHP

Generally, a cross-site scripting (XSS) is used by an attacker to easily bypass client-side validation and the "same-origin-policy" of web application or website, in order to gain unauthorized access to information.

Read more on XXS attack here: https://brainly.com/question/15979218

Otras preguntas