To defend against XSS, you must primarily determine which input is valid and reject all the rest.

• 要防御XSS,您必须从根本上确定哪些输入是有效的,然后拒绝所有其他输入。