Which of the following solutions will best remedy the vulnerability?

A security analyst discovers the company’s website is vulnerable to cross-site scripting.

Which of the following solutions will best remedy the vulnerability?
A . Prepared statements
B . Server-side input validation
C . Client-side input encoding
D . Disabled JavaScript filtering

View Answer

Answer: B

Explanation:

Server-side input validation is a solution that can prevent cross-site scripting (XSS) vulnerabilities by checking and filtering any user input that is sent to the server before rendering it on a web page. Server-side input validation can help to ensure that the user input conforms to the expected format, length and type, and does not contain any malicious characters or syntax that may alter the logic or behavior of the web page. Server-side input validation can also reject or sanitize any input that does not meet the validation criteria.

Reference: https://portswigger.net/web-security/cross-site-scripting/preventing