Which two methods allow this issue to be mitigated?

A web application is susceptible to cross-site scripting.

Which two methods allow this issue to be mitigated? (Choose two.)
A . Use only drop downs.
B . Limit user input to acceptable characters.
C . Encrypt user input on the client side.
D . Use AES encryption to secure the script.
E . Remove all HTML/XML tags from user input.

View Answer

Answer: BE

Explanation:

https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html