Salesforce
ARC-300 · Question #39
A developer is checking for Cross Site Scripting (XSS) and found that the quick search is not escaped (allows inclusion of Javascript) in the following script: How would the developer resolve this…
The correct answer is C. Use <isprint value='${searchPhrase} encoding-'jsblock" />. See the full explanation below for the reasoning.
Question
A developer is checking for Cross Site Scripting (XSS) and found that the quick search is not escaped (allows inclusion of Javascript) in the following script:
How would the developer resolve this issue?
Options
- AReplace ' with double Quote*
- BUse <isprint value="${searchPhrase}* encoding-'jshtmr />
- CUse <isprint value='${searchPhrase} encoding-'jsblock" />
- DUse <toprint value="${searchPhrase}" />
How the community answered
(40 responses)- A5% (2)
- B8% (3)
- C73% (29)
- D15% (6)
Community Discussion
No community discussion yet for this question.