Injection

Also written: injection attacks

Input that a program treats as a command, as in SQL injection or cross-site scripting. Input validation stops it.

Where the book teaches it