Which are the default scripting codecs supported by the security API
-
JavaScript
-
VBScript
-
Both of the above
-
None of the above
Reveal answer
Fill a bubble to check yourself
C
Correct answer
Explanation
The security API provides default codecs for both JavaScript and VBScript to protect against cross-site scripting (XSS) attacks. These are the two most common client-side scripting languages that require encoding to prevent injection vulnerabilities.
AI explanation
ESAPI ships built-in scripting codecs for encoding output safely into script contexts, specifically a JavaScript codec and a VBScript codec, covering the two scripting languages most relevant to browser-based web pages of that era. That's why 'both of the above' is the correct, complete answer rather than just one.