Head section · Question 11 of 12
A template writes a visitor's search term into a <meta> tag with f:page.headerData. What must be observed?
1 answer is correct. Hard
Show answer
Answer
- D Escape it yourself
Explanation
headerData and footerData output their content without escaping via the PageRenderer. User input in them is an XSS risk; for meta tags f:page.meta is the better way.