invalid before the mechanism, but then syntactically/semantically valid after the mechanism
collapses the string into "../". Double-decoding issues are similar.
6) XSS and buffer overflows can share certain characteristics, such as the mixture of data and
directives. In the overflow case, though, this mixture occurs at a level below the programming