XSS

Also written: cross-site scripting

Cross-site scripting: text such as a product name that gets run as code in your page. A strict CSP and `textContent` help stop it.

Where the book teaches it