Which of the following controls would BEST mitigate the vulnerability?

A penetration tester is testing a web application and is logged in as a lower-privileged user. The tester runs arbitrary JavaScript within an application, which sends an XMLHttpRequest, resulting in exploiting features to which only an administrator should have access .

Which of the following controls would BEST mitigate the vulnerability?
A . Implement authorization checks.
B . Sanitize all the user input.
C . Prevent directory traversal.
D . Add client-side security controls

View Answer

Answer: A