Which technique does an attacker use to bypass WAF signature-based XSS detection by encoding the payload as HTML entities within a JavaScript event handler?
-
A
Obfuscation through entity encoding
-
B
Polyglot injection
-
C
DOM clobbering
-
D
Prototype pollution