results, request headers, URL components, e-mail, files, filenames, databases, and any external systems
that provide data to the application. Remember that such inputs may be obtained indirectly through API
calls.
1. CWE-79 : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')