A developer has a Apex controller for a Visualforce page that takes an ID as a URL parameter. How should the developer prevent a cross site scripting vulnerability?

Question

Options

• AApexPages.currentPage() .getParameters() .get('url_param')
• BApexPages.currentPage() .getParameters() .get('url_param') .escapeHtml4()
• CString.ValueOf(ApexPages.currentPage() .getParameters() .get('url_param'))
• DString.escapeSingleQuotes(ApexPages.currentPage() .getParameters(). get('url_param'))

• A
  8% (2)
• B
  72% (18)
• C
  16% (4)
• D
  4% (1)

No community discussion yet for this question.