Escape template data to prevent XSS security vulnerabilities in Magento
Escape Magento template data with $escaper escapeHtml to prevent XSS vulnerabilities in ecommerce storefronts.
Lesson Content
Whenever your code allows others to inject either code or styles into a block of content, it must be escaped to prevent cross-site scripting, or XSS security vulnerabilities. Not escaping this content...
Join the discussion!
Comments
Want to comment on this lesson?
Enroll in this course to leave comments.