CyberCertPrepWeb App FundamentalsHTTP & Web BasicsEASYFree question
An analyst sees a POST request body with 'application/x-www-form-urlencoded' encoding: 'name=John+Doe&amount=100%2E00'. What does '%2E' represent?
- A.A null byte used for path traversal
- B.A Unicode escape sequence for the Euro sign
- C.A percent-encoded period (.) character - URL encoding replaces non-alphanumeric characters with % followed by their two-digit hex ASCII code
- D.An HTML entity reference for the ampersand
Why C is correct
URL encoding (percent-encoding) converts characters to their hexadecimal ASCII representation preceded by %. %2E is the encoding for '.' (period, ASCII 0x2E). '+' encodes space in form data. Security relevance: servers must properly decode URL-encoded input before processing, and security filters must decode values before inspecting them - otherwise attackers can bypass filters using encoded versions of dangerous characters.
Know someone studying for Web App Fundamentals? Send them this one.