Question

A vulnerability scan of a company's customer feedback portal reports a stored cross-site scripting (XSS) vulnerability. Analysts confirm that user-submitted comments are saved to a database and later rendered directly into the HTML of an administrative review page without any transformation. Which secure coding control most directly remediates this vulnerability?

Accepted Answer

Apply context-aware output encoding when rendering the stored comment data into the HTML page

Answer

Convert all database queries to use parameterized statements with bound variables

Answer

Enforce TLS 1.3 on all connections between the browser and the web server

Answer

Implement account lockout after five failed administrator logins