The XSS attac

Which of these unique features in Django gives a special security advantage of “non-vulnerability” to XSS attacks?

Options

1. It doesn’t accept raw SQL from users.
2. It has automatic HTML escaping
3. It has CSRF protection as there is no replay of forms by other code
4. Both Choice 1,2
5. Both Choice 1,3