Statement 1: Before putting untrusted data into an HTML attribute, ensure it's HTML encoded. HTML attribute encoding is a subset of HTML encoding and encodes double quote ("), single quote ('), ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results