QuestionQ584

Application Deployment and Security

Refer to the exhibit.

Question Image

Which OWASP threat is demonstrated by this example?

  • A broken access control
  • B cross-site scripting
  • C SQL injection
  • D man-in-the-middle
Explanation

Cross-site scripting (XSS) occurs when untrusted input is incorporated into a web response without safe validation or output encoding, allowing browser-executable script to run in the trusted site’s context. OWASP identifies injected <script> payloads that execute in a browser as XSS.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!