Exam CAS-004 topic 1 question 387 discussion

When in doubt, sanitize your inputs

The best answer is C. Implement input sanitization. The logs indicate that there are potential SQL injection and cross-site scripting (XSS) attempts being made via URL parameters. Implementing input sanitization will help mitigate these types of attacks by ensuring that user input is properly validated and sanitized before being processed by the application.

The company should C. Implement input sanitization next to mitigate the risk of a compromise from these attacks. The logs show a POST request where user input is being included in the feedback parameter. The presence of <script> in the input suggests that an attacker may be attempting a Cross-Site Scripting (XSS) attack. Input sanitization can help prevent such attacks by ensuring that any user-supplied input is properly cleaned and encoded before it is used or displayed, thereby preventing it from being interpreted as malicious code. While the other options (Restrict HTTP methods, Perform parameterized queries, Validate content types) can provide some level of security, they do not directly address the specific issue shown in the logs.

C. Implement input sanitization