Cross-site scripting · Question 7 of 12
Can an XSS hole also be built via TypoScript?
1 answer is correct. Easy
Show answer
Answer
- D Yes, for example with GET values output raw
Explanation
TypoScript outputs TEXT values unchanged, for example. If you fetch data from the request with data = GP:…, you need an encoding such as htmlSpecialChars = 1.