Security
XSS
Injecting script into a page so it runs with the site's origin and privileges.
Why interviewers ask about it
Context-aware output escaping is the fix, not input filtering. Django and Jinja2 autoescape by default - so the risk lives in |safe and dangerouslySetInnerHTML.
Related terms
This term is part of the free Python Full-Stack interview preparation module - browse the full glossary for every definition.