OWASP Vulnerabilities · interview question
How would you explain a key strategy Java web applications use to protect against Stored XSS attacks in an interview?
Multiple choiceEasychapter-17-curatedpremiumowasp-vulnerabilitiescross-site-scripting-xss
Answer and explanation
Correct answer
D. HTML Entity Encoding of user inputs before rendering
Why
HTML Entity Encoding converts characters that could be interpreted as HTML tags into safe strings. This prevents malicious scripts from being executed in the browser.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential limitation of using only CSRF tokens for preventing CSRF attacks in an interview?
- In a Spring Security filter chain, what is the purpose of filters?
- What role does the 'Signature' play in a JWT?
- Why does the 'signature' in a JWT matter in this design?
- Which of the following best describes a CSRF attack?
- How does Spring Security validate that a CSRF token is legitimate upon receiving a form submission?