Multiple choice technology security

Which methods in the TCS SAPI can be used to prevent Cross Site Scripting Attacks?

  1. isSafeHTML(java.lang.String context, java.lang.String input, boolean allowNull) and encodeForHTML(java.lang.String input)

  2. isSafeHTML(java.lang.String context, java.lang.String input)

  3. SafeHTML(java.lang.String context, java.lang.String input)

  4. ValidHTML(java.lang.String context, java.lang.String input)
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

The TCS SAPI provides isSafeHTML() and encodeForHTML() methods to prevent Cross Site Scripting (XSS) attacks. The isSafeHTML() method validates HTML content against a context to ensure it's safe, while encodeForHTML() encodes potentially dangerous characters to prevent script injection. Using these methods together provides comprehensive XSS protection.

Keep practicing — related questions