1 We might also want to inject SQL statements or script tags to perform SQL injection and cross-site scripting attacks. Those topics will be discussed in later chapters.