Stored XSS WAHS Practice Questions (Page 8)

Questions 36–38

1. 36expert · hard

   A company runs a legacy web application that is vulnerable to Stored XSS. The application is critical to operations and cannot be taken offline. The team must reduce risk immediately while planning a long-term fix. Which approach BEST balances immediate risk reduction and long-term remediation?

   • ADeploy a Web Application Firewall (WAF) with rules to block XSS payloads, and schedule a code fix for output encoding.
   • BAdd a Content Security Policy that blocks all scripts.
   • CImmediately rewrite the application using a secure framework.
   • DDisable the vulnerable feature until the code is fixed.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A development team is hardening a web application against stored XSS. They decide to implement a Content Security Policy (CSP). Which CSP directive is most effective at preventing the execution of inline scripts injected through stored XSS?

   • Ascript-src 'self'
   • Bdefault-src 'none'
   • Cimg-src 'self'
   • Dconnect-src 'self'
   Reveal Solution Discussion Select an answer first
3. 38expert · hard

   A penetration tester is testing a web application for Stored XSS. They have identified a comment field that appears to store input. However, the application uses a WAF that blocks obvious script tags. Which technique is MOST likely to bypass the WAF and confirm the vulnerability?

   • AUse an event handler like `<img src=x onerror=alert(1)>` instead of a script tag.
   • BSend the payload in a URL parameter instead of the comment field.
   • CSubmit the payload using only uppercase letters.
   • DUse a payload that does not contain any HTML tags.
   Reveal Solution Discussion Select an answer first