QuestionQ26

VerifiedWeb application and API security with botnet mitigation

A FortiWeb administrator is securing a customer checkout website.

The site includes sensitive links such as Login, Payment, and Admin, embedded within the HTML content of several pages.

A vulnerability scan indicates that automated bots can crawl the web pages and readily enumerate these links by parsing the HTML source, although users access them normally through the site navigation.

Which FortiWeb feature should the administrator enable to stop automated scanners from discovering these links?

Explanation

FortiWeb Link Cloaking transforms fixed links in HTML into automatically generated JavaScript-based links that web crawlers and scanning software cannot recognize, while browsers decode the link for normal user navigation. URL Encryption instead protects against forceful browsing by obscuring URL paths; it does not prevent scanners from finding link tags in page content.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!