There is the following section in the SFCC documentation:
Salesforce B2C Commerce 19.10 > Merchandising Your Site > Content Assets > Content Assets for Developers > Content Best Practices. Here is the link to the section.
In the section the only topic covered is the XSS attacks prevention. I can not understand how the XSS attacks are related to the content assets.
The whole content assets data is created and managed in BM (i.e. on backend), so no client side script can change the data. So, I would consider the topic to be inappropriate to appear as a content assets related documentation section.
Also, the example there which uses the
pdict.ProductSearchResult.searchPhrase is not related to the content assets in any way.
I would expect the section to appear somewhere in the ISML related documentation parts. May it be that the documentation developers made a mistake or am I missing something here?