To divvent this type of attack, you need to be careful about displaying user-submitted content verbatim on a Web page.

• 要阻止这样的攻击，首先要特别注意怎样显示用户提交的数据。