Secure Coding.

Writing code defensively against attacks. Covers 12 sub-skills.

• Secure Coding · 1 of 3

  Input/Output Validation

  What is the safer alternative to innerHTML for inserting plain text into the DOM?

  AtextContentBdocument.writeCinsertAdjacentHTMLDouterHTML

• Secure Coding · 2 of 3

  Secure File Upload

  What control mitigates denial of service via large uploads?

  ARun an antivirus scan on every accepted uploadBStore uploads outside the web root after acceptanceCEnforce size limits and streaming quotasDValidate the file's magic bytes before accepting it

• Secure Coding · 3 of 3

  Dependency Scanning & SCA

  You need to generate an SBOM for a government contract. Which two formats are the industry standards for SBOM generation?

  AJSON Schema and OpenAPIBCVSS and EPSSCCycloneDX and SPDXDSARIF and JUnit