Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 92

Question

You are on your company's development team. You noticed that your web application hosted in staging on GKE dynamically includes user data in web pages without first properly validating the inputted data. This could allow an attacker to execute gibberish commands and display arbitrary content in a victim user's browser in a production environment. How should you prevent and fix this vulnerability?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Use Web Security Scanner in staging to simulate an XSS injection attack, and then use a templating system that supports contextual auto-escaping.

Google Cloud Professional Cloud Security Engineer PCSE — Question 92