Fluid output · Question 2 of 12
Which ViewHelper outputs content without any encoding and must never receive user input?
1 answer is correct. Easy
Show answer
Answer
- A f:format.raw
Explanation
f:format.raw switches off escaping. With content from forms, URLs or foreign sources this directly creates an XSS hole.