Bird
0
0

Which Jinja2 syntax should you use to safely display a variable named username in a Flask template?

easy📝 Conceptual Q2 of 15
Flask - Security Best Practices
Which Jinja2 syntax should you use to safely display a variable named username in a Flask template?
A{{ username|safe }}
B{{ username }}
C{% raw username %}
D{{ username|escape }} (double escape)
Step-by-Step Solution
Solution:
  1. Step 1: Identify safe default rendering

    Using {{ username }} automatically escapes content, preventing XSS safely.
  2. Step 2: Analyze other options

    |safe disables escaping (unsafe), {% raw %} is for raw blocks, and double escaping is unnecessary.
  3. Final Answer:

    {{ username }} -> Option B
  4. Quick Check:

    Safe display = B [OK]
Quick Trick: Use {{ variable }} for safe automatic escaping [OK]
Common Mistakes:
MISTAKES
  • Using |safe which disables escaping
  • Misusing {% raw %} for variables
  • Applying unnecessary double escaping

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Flask Quizzes