QUESTION: 13

An Adobe Commerce developer needs to pass JSON data to a JavaScript component while keeping XSS prevention strategies in mind.

Which two options would the developer use? (Choose two.)

A)

B)

C)

D)

Option A
Option B
Option C
Option D

Answer(s): A,C

Explanation:

To pass JSON data to a JavaScript component while keeping XSS prevention strategies in mind, the developer should use the following options:

Option A: Use the x-magento-init script tag with the data-mage-init attribute and the JSON.parse function to initialize the component with the JSON data. This option is secure because it does not use any HTML tags or attributes that can be exploited by XSS attacks.

Option C: Use the text/x-magento-init script tag with the type attribute and the JSON.parse function to initialize the component with the JSON data. This option is secure because it does not use any HTML tags or attributes that can be exploited by XSS attacks.

The following options are not secure and should not be used:

Option B: Use the script tag with the type attribute and the escapeHtmlAttr function to initialize the component with the JSON data. This option is not secure because it uses the escapeHtmlAttr function, which is meant for escaping HTML attributes, not JSON data. This function can introduce double quotes in the JSON data, which can break the JSON syntax and cause errors.

Option D: Use the script tag with the type attribute and the escapeJsQuote function to initialize the component with the JSON data. This option is not secure because it uses the escapeJsQuote function, which is meant for escaping JavaScript strings, not JSON data. This function can introduce backslashes in the JSON data, which can break the JSON syntax and cause errors.

Reveal Solution Next Question

QUESTION: 14

An Adobe Commerce developer created a module called Orange_Customer. In customer information.

Where would the developer place this file?

app/code/OrangG/customer/viev^/frontend/web/templates/customer-info.phtml
app/code/Orange/Customer/frontend/templates/customer-info.phtml
app/code/OrangG/Custon>Gr/viGw/frontGnd/templates/customGr-info.phtml

Answer(s): C

Explanation:

To place a template file for a custom module, the developer should follow this path pattern:

app/code/<Vendor>/<Module>/view/<Area>/templates/<Template>

In this case, the vendor name is Orange, the module name is Customer, the area is frontend, and the template name is customer-info.phtml. Therefore, the correct path is:

app/code/Orange/Customer/view/frontend/templates/customer-info.phtml

The following paths are not correct and will not work:

app/code/Orange/customer/view/frontend/web/templates/customer-info.phtml: This path is incorrect because it uses web instead of templates, which is used for storing web assets like CSS, JS, and images, not template files.

app/code/Orange/Customer/frontend/templates/customer-info.phtml: This path is incorrect because it misses the view directory, which is required for separating frontend and backend templates.

Reveal Solution Next Question

QUESTION: 15

An Adobe Commerce developer needs to display a URL in the template. How would the variable $ur1 be securely output in the template?

<?php echo $escaper->escapeUrl($url) ?>
<?php echo $escaper->escapeLink($url) ?>
<?php echo $escaper->escapeHtml($url) ?>

Answer(s): A

Explanation:

To display a URL in a template securely, the developer should use the escapeUrl method of the escaper object. This method will encode any special characters in the URL that can be used for XSS attacks, such as &, <, >, ", ', etc. For example:

<?php echo $escaper->escapeUrl($url) ?>

The following methods are not suitable for displaying URLs and should not be used:

<?php echo $escaper->escapeLink($url) ?>: This method is used for escaping link attributes, not URLs. It will encode any characters that are valid in URLs but invalid in HTML attributes, such as spaces, quotes, etc. For example:

<?php echo $escaper->escapeLink(`https://example.com/?q=hello world') ?> // Output:
https://example.com/?q=hello%20world

<?php echo $escaper->escapeHtml($url) ?>: This method is used for escaping HTML content, not URLs. It will encode any characters that are valid in URLs but invalid in HTML content, such as &, <, >, etc. For example:

<?php echo $escaper->escapeHtml(`https://example.com/?q=<script>alert("XSS")</script>') ?> // Output: https://example.com/?q=<script>alert("XSS")</script>

Reveal Solution Next Question

QUESTION: 16

An Adobe Commerce developer is trying to remove a block using the <remove name="test.block'/> tag in a layout XML file but it shows an error and doesn't work.

Which tag would be applied to fix the error?

US6 <referenceBlock name="test.block" remove="true"/>
Use <remove name="Custom_Module:test.block"/>
Use<referenceBlock name="test.block" delete="true'7>

Answer(s): A

Explanation:

To remove a block using layout XML, the developer should use the <referenceBlock> tag with the name attribute specifying the name of the block and the remove attribute set to true. For example:

<referenceBlock name="test.block" remove="true"/>

This will remove the block from the layout and prevent it from rendering. The <remove> tag is not valid and will cause an error. The name attribute should not include the module name, as it is not part of the block name. The delete attribute is not valid and will not work.

Reference:

[Layout instructions], [Remove an element]

Reveal Solution Next Question

Free AD0-E720 Exam Braindumps (page: 4)

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

QUESTION: 16

Explanation:

Reference: