Question 200
At the Eastmere housing nonprofit after a wider deployment, a form validation helper inserts untrusted text as HTML in a custom notification pane. The operations team needs a supportable remediation with evidence for the handover. Which ongoing engineering control would most directly reduce recurrence?
Explanation
Correct Answer
Make future changes safer by ensuring teams include notification encoding checks in front-end code reviews. The control belongs with the original correction to use supported form notifications with escaped plain-text messages. In the Eastmere housing nonprofit, assess this against the documented form notifications scenario.
Incorrect Answers
That safeguard is appropriate for maintaining content security policy. It would not primarily prevent the reported failure, for which the relevant control is to include notification encoding checks in front-end code reviews. For case R082-PL400-CASE-0050, the decisive context is the 2 deployment setting at the Eastmere housing nonprofit.
This monitoring or review practice targets navigation and dialogs; the better ongoing protection for this case is to include notification encoding checks in front-end code reviews. For case R082-PL400-CASE-0050, the decisive context is the 2 deployment setting at the Eastmere housing nonprofit.
“Test Client API access when form hosts and dialog entry points change” checks a different ongoing risk rather than the reported failure: at the Eastmere housing nonprofit after a wider deployment, a form validation helper inserts untrusted text as HTML in a custom notification pane. The operations team needs a supportable remediation with evidence for the handover. The relevant mechanism is untrusted HTML injection exposes a client-side rendering risk. The directly matched preventive control is “Include notification encoding checks in front-end code reviews”.