Section 19: Findings and Remediations

Question 1

Output Encoding

Answer 1

Output Encoding
▪ Output encoding mitigates against code injection and XSS attacks that
attempt to use input to run a script

Question 2

Parameterized Queries

Answer 2

Parameterized Queries
▪ A technique that defends against SQL injection and insecure object
references by incorporating placeholders in a SQL query
▪ Parameterized queries are a form of output encoding