Câu 26: CA1-005: CompTIA SecurityX

A security engineer is reviewing the following piece of code for an internally developed web application that allows employees to manipulate documents from a number of internal servers. Users can specify the document to be parsed by passing the document URL to the application as a parameter. The application then executes the following Python call: response = requests.get(url)The engineer wants to improve the security of the application before deployment. Which of the following is the best to implement?

1. A. Indexing
2. B. Output encoding
3. C. A code scanner
4. D. A WAF — đáp án hiện tại