Multiple choice technology security

Which are the default codecs supported to help encode characters to be safely used on OS command shells

  1. Unix Codec

  2. Windows Codec

  3. Unix and Windows Codec

  4. Linux Codec
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Command injection protection requires encoding for both Unix and Windows command shells, which have different meta-characters and quoting rules. A Linux codec would be redundant with Unix codec. Both major operating systems need protection.

AI explanation

To safely encode characters destined for an OS command shell, ESAPI provides a Unix codec and a Windows codec, since the two major shell families escape special characters differently (e.g., backslash vs. different quoting rules). Supporting both covers the common deployment targets, which is why 'Unix and Windows Codec' is the right answer rather than a single-OS codec.

Keep practicing — related questions