Multiple choice technology security

Which are the default scripting codecs supported by the security API

  1. JavaScript

  2. VBScript

  3. Both of the above

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The security API supports both JavaScript and VBScript codecs by default because these are the two most common scripting languages used in cross-site scripting (XSS) attacks. Encoding output for both languages provides comprehensive protection against XSS vulnerabilities. Supporting only one would leave applications vulnerable to attacks using the other.

Keep practicing — related questions