Formatting · Question 10 of 12
Which format ViewHelpers can lead to XSS when used carelessly?
2 answers are correct. Medium
Show answer
Answer
- A f:format.htmlentitiesDecode
- C f:format.raw
Explanation
raw removes escaping, htmlentitiesDecode turns escaped characters back into HTML. htmlspecialchars and stripTags, in contrast, make the output safer.