MENU
A developer has a Apex controller for a Visualforce page that takes an ID as a URL parameter. How should the developer prevent a cross site scripting vulnerability?
Suggested Answer: B
Get Premium DEX-450 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
PA
Paris
12 months ago
Isn't escaping single quotes enough? Seems risky.
VA
Vanda
12 months ago
I disagree, option D doesn't cover all cases.
SH
Shawana
12 months ago
Surprised that people still overlook XSS vulnerabilities!
RO
Rodolfo
1 year ago
I think option A is fine too, but not safe enough.
DE
Demetra
1 year ago
Option B is definitely the way to go!
LA
Lashaun
1 year ago
I’m a bit confused about the difference between escapeHtml4() and escapeSingleQuotes. Would both help prevent XSS?
MA
Marg
1 year ago
I think we had a similar question in our practice exam, and I believe using escapeHtml4() was emphasized as a best practice.
RO
Royal
1 year ago
I'm not entirely sure, but I feel like just getting the parameter without any escaping could leave us open to attacks.
CO
Corinne
1 year ago
I remember we talked about escaping HTML to prevent XSS vulnerabilities, so I think option B might be the right choice.
MA
Marylyn
1 year ago
This seems like a tricky question. I'll need to think through the requirements carefully to determine the best strategy.
EL
Elroy
1 year ago
This seems like a straightforward question about how to handle on-site sales and installations in the Field Service mobile app. I think I have a good understanding of the options presented.
VE
Vernice
1 year ago
HIPAA, got it. That's the key law that sets the standards for protecting patient information in hospitals and other healthcare settings.
ES
Essie
1 year ago
This question seems straightforward. I'll carefully read through the criteria and select the ones that best match the definition of a CMS.
AS
Ashley
1 year ago
This is a good question to test our knowledge of Decision Center security. I'll draw on my experience configuring Decision Center to identify the most appropriate set of roles listed in the options.
FR
France
1 year ago
This seems straightforward enough. I'll just need to do the math step-by-step to find the sales figure that would result in a $200,000 profit, given the breakeven point and fixed costs.