Question
A systems engineer is reviewing output from a web application vulnerability scan. The engineer has determined data is entering the application from an untrusted source
A systems engineer is reviewing output from a web application vulnerability scan. The engineer has determined data is entering the application from an untrusted source and is being used to construct a query dynamically. Which of the following code snippets would BEST protect the application against a SQL injection attack? A. String input = request.getParameter (SegNo); String characterPattern = [0-9a-zA-2] If (! Input. Matches (characterPattern)) out.println (Invalid Input); B. /> C. catch (Exception e) if (log.isDebugEnabled ()) log.debug (context, EVENTS.ADHOC, CaughtInvalidGSMException Exception - + e.tostring ()); D.
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started