Exit B2C-COMMERCE-ARCHITECT Salesforce Certified B2C Commerce Architect (Arch-303)
Question 2 of 5
0% complete
Q2 Single choice

A developer is checking for Cross Site Scripting (XSS) and found that the quick search is not escaped (allows inclusion of Javascript) in the following script:

How would the developer resolve this issue?

  • A

    Replace' with double Quote*

  • B

    Use <isprint value="${searchPhrase}* encoding-'jshtmr />

  • C

    Use <isprint value='${searchPhrase} encoding-'jsblock" />

  • D

    Use <toprint value="${searchPhrase}" />

Previous Next