A website that allows users to enter and display arbitrary text to other users without...
Nopal Securities technical mcq question, verified with a worked answer. Free to practise - no sign-up.
A website that allows users to enter and display arbitrary text to other users without proper sanitization is potentially vulnerable to which attack?
Show answer & explanation
Answer: A. Cross-site scripting (XSS)
Reflecting or storing unescaped user input into HTML allows attacker-controlled JavaScript to execute in victims' browsers (Cross-Site Scripting).
Step-by-step Derivation:
Step 1: When user-supplied text containing