Imagine a social networking web app (like Twitter) that allows users to post short blurbs of text.
A)cross-site scripting
B)sql injection
C)packet sniffing
D)a and b

Question

Quizplus · Accepted Answer

Cross-site scripting (XSS) and SQL injection are both relevant security concerns for a social networking web app. XSS can occur when an application includes untrusted data in a new web page without proper validation, allowing attackers to execute scripts in the browser of unsuspecting users. SQL injection involves inserting or "injecting" an SQL query via the input data from the client to the application, potentially allowing attackers to view, modify, or delete database information. Packet sniffing, while a security concern, is more related to network-level eavesdropping and less specific to the vulnerabilities of a web application itself.

Imagine a Social Networking Web App (Like Twitter) That Allows