Because it involves importing data into a Web site, a malicious user could try to insert bad data or even script code into the description file that is imported.

• 由于它涉及向网站中导入数据,因此恶意用户可能尝试向导入的说明文件中插入错误数据甚至脚本代码。