Such remedies as input validation and HTML escaping are a start, but they must be applied at all application points that accept data.
诸如输入验证和HTML转义这样的补救措施只是个开始，但必须将它们应用到接受数据的应用程序点。
To get rid of this vulnerability, you can either perform input validation or ensure that user-submitted data is always HTML-escaped before displaying it.
要消除这种漏洞，可以执行输入验证，或者确保用户所提交的数据总是在显示之前已被html转义。
Server field validator—adds server-side validation to HTML form fields.
服务器字段验证器 — 向 HTML 表单字段添加服务器端验证。
应用推荐