Past questions › fam-q11b
2025 2 marks Short answer Secure Software Architecture (Year 12) Cross-site scripting
NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)
[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: explain ONE way to minimise the XSS vulnerability]
Marking criteria
2: Explains ONE way to minimise the vulnerability. 1: Some relevant information.
Sample answer
The website could check and change user input so that markup and script become plain text. This will still allow the page to display the information but will prevent it from executing script code.