Which of the following Flask code snippets correctly sanitizes user input before rendering it in HTML?

easy📝 Syntax Q3 of 15

Flask - Security Best Practices

Auser_input = request.args.get('name').lower()

Buser_input = request.args.get('name')

Cfrom flask import escape user_input = escape(request.args.get('name'))

Duser_input = request.args.get('name').strip()

Step-by-Step Solution

Solution:

Step 1: Check for sanitization function usage
Only from flask import escape user_input = escape(request.args.get('name')) uses escape() to sanitize input.
Step 2: Understand other options
Options A, B, and C get input but do not sanitize it.
Final Answer:
from flask import escape\nuser_input = escape(request.args.get('name')) -> Option C
Quick Check:
Sanitization requires escape() usage [OK]

Quick Trick: Always wrap user input with escape() before HTML output [OK]

Common Mistakes:

MISTAKES

Master "Security Best Practices" in Flask

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More Flask Quizzes