I am struggling with the problem of displaying a personalized field (first name) in email. The problem is that sometimes can happened situation when person, which is registering to the company's system, instead of, for example, write "Alicja" into First Name field, will put "<img src="htt ps://shorturlxx.at/xxxxx“>" OR some worst problematic different code which can be executed. The problem is - after registration part, email is sent. Email contains personalization, like: Hello %%FirstName%%. This means, if user will put some dangerous code into First Name field, code will places in the email, like Welcome <img src="htt ps://shorturlxx.at/xxxxx“>. In provided example nothing wrong will happend, Simple email will have "Welcome" and image will appear next to it. But can happened that someone will put email address somebody's, then in First Name put dangerous code, which will execute when person will receive an email.
Question: : is there any function in Marketing Cloud which will prevent to execute code if someone will provide it? Amp Script and SSJS would not execute if we are using AttributeValue, but "src=...url" was not displayed as a string, but as an image. I was testing it, looking for functions. Have no idea for the solution. Regex/string validation is not the available option. Case is to show whole string as registered person provided- which can be possible code, as a none executing string.