Salesforce

CRT-450 · Question #231

Which code in a Visualforce page and/or controller might present a security vulnerability?

The correct answer is B. <apex:outputText escape="false" value="{!sCurrentPage.parameters.userInput}TM />. See the full explanation below for the reasoning.

Question

Which code in a Visualforce page and/or controller might present a security vulnerability?

Options

A<apex:outputfield value="(!ctrl.userinput)" rendered="(!isfditable}" />
B<apex:outputText escape="false" value="{!sCurrentPage.parameters.userInput}TM />
C<apex:outputField value="{'ctrl.userInput}" />
D<apex:outputText value="{!SCurrentPage.parameters.useriInput}" />

How the community answered

(41 responses)

A
2% (1)
B
83% (34)
C
10% (4)
D
5% (2)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full CRT-450 Practice