Fluid and translation · Question 11 of 12
Which statements about escaping in Fluid are correct?
2 answers are correct. Hard
Show answer
Answer
- C The output of {variable} is HTML-escaped by default
- D f:format.raw outputs a value without escaping and should only be used for trusted content
Explanation
Automatic escaping protects against XSS; f:format.raw deliberately disables it.