Output context · Question 5 of 12
Why is HTML escaping not sufficient for every output context?
1 answer is correct. Easy
Show answer
Answer
- B Other rules apply in JavaScript or URLs
Explanation
A value in a script block or a URL needs a different encoding than a value in running text. The encoding must match the place where the value ends up.