CompTIA Security+ SY0-701 Practice Question

The correct answer is 'False' because Cross-Site Scripting, commonly known as XSS, is a security vulnerability type that occurs in web applications when developers fail to adequately sanitize or encode user input that is later displayed by web browsers. If user input, such as form submissions or URL parameters, is rendered directly without proper validation and escaping, it may lead to malicious scripts being sent to other users, thereby exploiting the vulnerability. Therefore, the statement is incorrect; implicitly trusting user input without validation and sanitization is actually one of the primary causes of XSS vulnerabilities, not a prevention measure.