Multiple choice technology security

Which of the following is NOT recommended for securing Web Applications against malicious users?

  1. Filtering data with a default deny regular expression

  2. Running the application with the least privilege necessary

  3. Client side data validation

  4. Retrieving data from database using pre-compiled stored procedures

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Client-side validation can be easily bypassed by disabling JavaScript, modifying requests, or using tools like proxy servers. Security controls must be implemented on the server where they cannot be tampered with by users.