Many intrusion vulnerabilities such as SQL injection, CSRF, and XSS are preventable using a comprehensive input-validation framework.

如果使用一个综合的输入验证框架，许多输入漏洞，如SQL注入、CSRF和XSS，都是可以避免的。

youdao

In the next scenario, the hypothetical Web site ensures that the generated pages are properly encoded by using the XSS custom tag library and is able to protect itself from the attack.

在下一个方案中，这个虚拟网站确保生成的页面是通过使用xss定制标记库正确编码的，并且能避免攻击。

youdao