要阻止这样的攻击，首先要特别注意怎样显示用户提交的数据。

• To prevent this type of attack, you need to be careful about displaying user-submitted content verbatim on a Web page.