Which function correctly escapes output for HTML context?
- A strip_tags()
- B htmlspecialchars($v, ENT_QUOTES, 'UTF-8')
- C addslashes()
- D urlencode()
Answer
htmlspecialchars($v, ENT_QUOTES, 'UTF-8')
Escaping must match the output context. HTML, attribute, JavaScript and URL contexts each require different encoding.





