About Question enthuware.jwpv6.2.574 :

[tanzwud]

Hello.
Well I stuck with this question. I had a problem to choose the right question. Im study mainly using Java Doc and Servlet 3.0 final spec.
Well the Java Doc states "HttpOnly cookies are not supposed to be exposed to client-side scripting code, and may therefore help mitigate certain kinds of cross-site scripting attacks." and Servlet 3.0 states "The use of HttpOnly cookies helps
mitigate certain kinds of cross-site scripting attacks."
The correct answer "It prevents certain types of cross site scripting attacks." sound OK for me. However is this 100% alright in Oracle exam context when we have a little difference in between may thereofe prevents & mitigate vs prevents in question answer?
Many thanks.

[admin]

Yes, it ok from the exam point of view.

HTH,
Paul.