be available. For example, an attacker might be able to reach a trigger point in which untrusted
XSS or SQL syntax is inserted into a database, but if the downstream component performs
proper input validation and output encoding when it reads that data from the database, the
activation point is avoided.