🎴 Flashcard Mode

security Online Quiz - 9

Card1 / 20
Mastered0
Review0
QuestionClick to flip

Data returned by which of the following methods should be validated before using it

  1. getParameter ()
  2. getQueryString ()
  3. getCookies ()
  4. getHeaders ()
AnswerClick to flip back
A
1,2,3 and 4
💡 Explanation:

All four methods (getParameter, getQueryString, getCookies, getHeaders) return data from the HTTP request, which comes from an external source (the client/browser). This data is attacker-controlled and must be validated before use to prevent injection attacks, header manipulation, or other security issues. getParameter and getQueryString are obvious, but cookies and headers are also user-supplied and can be malicious.

Change Mode