Dynamic content should be HTML encoded using HTML::Entities::encode or Apache::Util::html_encode (when using mod_perl). For PHP applications, input data should be validated using functions such as ...