These mechanisms may be able to provide the relevant quoting, encoding, and validation automatically,
instead of relying on the developer to provide this capability at every point where output is generated.
1. CWE-89 : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
2. CWE-78 : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')