Liza has forgotten her password to an online bookstore. The web application asks her to key in her
email so that they can send her the password. Liza enters her email [email protected]’. The
application displays server error. What is wrong with the web application?
A.
The email is not valid
B.
User input is not sanitized
C.
The web server may be down
D.
The ISP connection is not reliable
Explanation:
All input from web browsers,such as user data from HTML forms and cookies,must
be stripped of special characters and HTML tags as described in the following CERT advisories:
http://www.cert.org/advisories/CA-1997-25.html
http://www.cert.org/advisories/CA-2000-02.html
B