Multiple choice technology security

Why is “Black List” input validation considered a weak validation method ?

  1. Because the validation settings are hard coded.

  2. Susceptible to bypass using various forms of character encoding

  3. Because it's difficult to implement a black list filter that also takes into account data sent using the POST method

  4. Because it is typically implemented using regular expressions to match known good data patterns
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Blacklist validation is weak because attackers can bypass it using various character encoding techniques: URL encoding, Unicode encoding, hex encoding, double-encoding, mixed encoding, and case variation. It's impossible to enumerate every possible malicious pattern. Options A and C are incorrect - the issue isn't about hard-coding or POST methods. Option D describes whitelist validation, not blacklist.

Keep practicing — related questions