Web Security · Middle · Question 68 of 75
What is server-side template injection?
- 1Using too many templates in one page
- 2Injecting HTML templates into the browser cache
- ✓Correct answer: User input is treated as part of a template, so template syntax in it gets evaluated on the server
Explanation
Render user data as template variables, never by building template source from user strings. In many engines this leads to remote code execution.