String concatenation is the primary point of entry for script injection.

• 字符串串联是脚本注入的主要输入点。