Ravi Sir's Cyber Security Cards › Interview Cards
A solid XSS defence direction is:
A solid XSS defence direction is: A. Disable all HTTPS B. Context-appropriate output encoding plus CSP mindset C. Store passwords in MD5 D. Open Redis to the world B. Context-appropriate output encoding plus CSP mindset XSS happens when user input is rendered as script, so the fix is context-appropr
Read card text
What this card says
Options
A. Disable all HTTPS
B. Context-appropriate output encoding plus CSP mindset
C. Store passwords in MD5
D. Open Redis to the world
Correct answer
B. Context-appropriate output encoding plus CSP mindset
Why
XSS happens when user input is rendered as script, so the fix is context-appropriate output encoding plus a Content Security Policy to limit what can run.
Learn more in the lesson: 48.7 CEH-Style Practice Questions – Set B (Modules 11–20)