單項(xiàng)選擇題

You are implementing a Web page that displays text that was typed by a user. You need to display the user input in the Web page so that a cross-site scripting attack will be prevented. What should you do？（）

A.Call document.write.
B.Call Response.Write.
C.Call HttpUtility.UrlEncode.
D.Call HttpUtility.HtmlEncode.

在線(xiàn)練習(xí)

你可能感興趣的試題

You are developing a Web page. The user types a credit card number into an input control named cc and clicks a button named submit. The submit button sends the credit card number to the server. A JavaScript library includes a CheckCreditCard function that returns a value of true if the credit card appears to be valid, based on its checksum. You need to ensure that the form cannot be used to submit invalid credit card numbers to the server. What should you do?（）

A.Configure the input control to run on the server. On the submit button， add a server-side OnClick handler that calls CheckCreditCard and rejects the form submission if the input is invalid.
B.On the input control，add an onChange handler that calls CheckCreditCard and cancels the form submission when the input is invalid.
C.Configure the input control and the submit button to run on the server. Add a submit_OnClick handler that calls CheckCreditCard and rejects the form submission if the input is invalid.
D.On the form， add an onSubmit handler that calls CheckCreditCard and cancels the form submission if the input is invalid.

單項(xiàng)選擇題

You have created an ASP.NET server control named ShoppingCart for use by other developers. Some developers report that the ShoppingCart control does not function properly with ViewState disabled. You want to ensure that all instances of the ShoppingCart control work even if ViewState is disabled. What should you do？（）

A.Require developers to set EnableViewStateMac to true.
B.Store state in ControlState instead of ViewState.
C.Serialize the state into an Application state entry called "MyControl"
D.Require developers to change the session state mode to SQL Server.