Be especially wary of any tag that causes the user to immediately load another file, such as the image tag - those tags are perfect for XSS attacks.

• 特别需要注意的是任何让用户立即加载另一个文件的标签,比如image标签那些标签非常适合XSS攻击。