Study. uk . com
  1. Home
  2. All questions
  3. Question 466

CompTIA Security+ study material · question 466 of 611

A security review of server responses finds no injected script, yet cross-site scripting still occurs. Which variant is most likely?

  1. DOM-based
  2. Reflected
  3. Persistent
  4. Stored
Show the answer

Answer: A. DOM-based

DOM-based scripting happens entirely in client-side code writing untrusted data into a dangerous sink.

Source: OWASP Cross Site Scripting Prevention Cheat Sheet (OWASP) — OWASP Cross Site Scripting Prevention Cheat Sheet › DOM Based XSS

Challenge yourself on this topic → Study as cards