[Solved] What is wrong with this Flask input sanitization code?from flask import escape, request user_input = request.args.get('data') safe_input = user_input | Flask

Flask - Security Best Practices

What is wrong with this Flask input sanitization code?

from flask import escape, request
user_input = request.args.get('data')
safe_input = user_input

Aescape() is called twice unnecessarily

BInput is not sanitized before use

Crequest.args.get() cannot get query parameters

Dsafe_input should be converted to int

Step-by-Step Solution

Solution:

Step 1: Analyze sanitization usage
escape() is imported but not used; input is assigned directly.
Step 2: Check other options
request.args.get() correctly gets query params; no need to convert to int here.
Final Answer:
Input is not sanitized before use -> Option B
Quick Check:
Missing escape() call = no sanitization [OK]

Quick Trick: Always apply escape() to user input before use [OK]

Common Mistakes:

MISTAKES

Master "Security Best Practices" in Flask

9 interactive learning modes - each teaches the same concept differently

More Flask Quizzes

What is wrong with this Flask input sanitization code?