Fluid and translation · Question 11 of 12

Which statements about escaping in Fluid are correct?

2 answers are correct. Hard

Show answer

Answer

  • C The output of {variable} is HTML-escaped by default
  • D f:format.raw outputs a value without escaping and should only be used for trusted content

Explanation

Automatic escaping protects against XSS; f:format.raw deliberately disables it.

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications