Question: Sometimes web applications will embed some encrypted secret data as hidden input fields on a web page. The secret data will be sent back to
Sometimes web applications will embed some encrypted secret data as hidden input fields on a web page. The secret data will be sent back to the server upon future requests. A major application for the secret data in these hidden input fields is to prevent cross-site scripting attacks. JavaScript code has access to these hidden input fields and the values inside. Which statement most accurately describes how secure this secret data is? Group of answer choices The secret data can be stolen by malicious JavaScript code. It can also be leaked when transferred through HTTP. The secret data can be stolen by malicious JavaScript code. But it cannot be leaked when transferred through HTTP. The secret data cannot be stolen by malicious JavaScript code. But it can be leaked when transferred through HTTP. Hidden input fields are secure. As a result, the secret data cannot be stolen by malicious JavaScript code or leaked when being transferred through HTTP
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
