Drill 24: Write a test — XSS, SQL injection and CSRF
Write one test you would add for this example.
What you will be able to do
- Write one test you would add for this example.
Practice task
Write one test you would add for this example.
// Wrong: input becomes SQL syntax
db.query('select * from users where email = ' + email)
// Right: data stays data
db.query('select id, email from users where email = $1', [email])
// Escape at the rendering boundary, not at input time
element.textContent = comment
// Avoid innerHTML with untrusted content.Your turn
EasyWrite your answer
Write one test you would add for this example.
TEXT · starter
Your answer…Study tools
Make it yours.
Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.
Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign inFinished reading?
Lock in what you just learned.
0%
Mark this lesson complete to save your place and move one step closer to the certificate.