"<script>" because HTML tags are case-insensitive.
If the permissions for /home/cwe/ allow local users to create their own .dat files within
that directory, then this may provide some MUTABILITY to the directory that the
programmer did not expect. The creation of a symbolic link would then further violate