Developing Applications Using Cisco Core Platforms and APIs (DEVCOR) — Question 19

A web application is susceptible to cross-site scripting.
Which two methods allow this issue to be mitigated? (Choose two.)

Answer options

• A. Use only drop downs.
• B. Limit user input to acceptable characters.
• C. Encrypt user input on the client side.
• D. Use AES encryption to secure the script.
• E. Remove all HTML/XML tags from user input.

Correct answer: B, E

Explanation

Option B is correct because limiting user input to acceptable characters helps prevent malicious scripts from being executed. Option E is also correct as removing HTML/XML tags eliminates the potential for injected scripts to be processed. The other options do not effectively mitigate cross-site scripting vulnerabilities.