5.3.3 Context-aware output escaping protects against reflected, stored, and DOM based XSS
Verify that context-aware, preferably automated - or at worst, manual - output escaping protects against reflected, stored, and DOM based XSS. (C4)
| Level 1 |
X |
| Level 2 |
X |
| Level 3 |
X |