PHP question on XSS
- by user318466
I need help in solving the following MCQ:
Which of the following filtering techniques prevents cross-site scripting (XSS) vulnerabilities?
A. Strip all occurrences of the string script.
B. Strip all occurrences of the string javascript.
C. Enable magic_quotes_gpc.
D. None of the above.
I think once the word java script is deleted there is no more threat. Am I correct ?