{CodeRoyale}
All challenges
Multiple ChoiceIntermediate 30s

XSS prevention

Choose the best answer for: cross-site scripting
Options
  1. 1Escape output; use CSP headers; never use innerHTML with user data
  2. 2Allow all inline scripts and disable CSP to simplify pages
  3. 3Omit security headers and rely on browsers default handling
  4. 4Using innerHTML with user data is safe once inputs are length-checked
fullstackintermediate

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle